今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-107059
An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch
CVE-2026-119591
SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to cra
CVE-2026-119586
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits a
CVE-2026-13747
The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4
CVE-2026-116552
The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_
CVE-2026-110533
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fv_player_vide
CVE-2026-107630
The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authoriz
CVE-2026-102905
The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in al
CVE-2026-9536
A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (ve
CVE-2026-9535
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A
CVE-2026-93290
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access i
CVE-2026-90872
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F
CVE-2026-90871
Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.
CVE-2026-90870
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi
CVE-2026-90869
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S
CVE-2026-90867
Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.
CVE-2026-90862
Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202
CVE-2026-90861
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear
CVE-2026-8824
A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s)
CVE-2026-8822
A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A sp