今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-113617
The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before u
CVE-2026-113616
The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved accou
CVE-2026-103693
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an una
CVE-2026-116111
A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the componen
CVE-2026-116370
A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the funct
CVE-2026-118579
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark
CVE-2026-115964
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot
CVE-2026-109516
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeo
CVE-2026-49875
Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary
CVE-2026-55572
e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authenticati
CVE-2026-42922
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially
CVE-2026-116863
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Req
CVE-2026-115607
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP
CVE-2026-58016
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection
CVE-2026-87302
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
CVE-2026-54630
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attac
CVE-2026-115377
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allow
CVE-2026-10757
There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may all
CVE-2026-107092
NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.
CVE-2026-85080
In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a