今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-39746
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Bookneti
CVE-2026-86384
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7
CVE-2026-103792
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions
CVE-2026-103780
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7
CVE-2025-49794
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circums
CVE-2026-32557
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooComme
CVE-2026-57116
PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deploy
CVE-2026-48360
Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resul
CVE-2026-115384
Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malici
CVE-2026-114611
OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile devi
CVE-2022-51026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to lo
CVE-2021-48016
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is wri
CVE-2026-84999
The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and
CVE-2026-115806
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,
CVE-2026-109218
The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 9.
CVE-2026-106013
The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in
CVE-2025-65200
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a
CVE-2026-61567
AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an a
CVE-2026-61564
AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.p
CVE-2026-118690
Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attacke