今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-111504
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Com
CVE-2026-101682
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions
CVE-2026-101214
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an
CVE-2026-101213
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low priv
CVE-2026-101210
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an
CVE-2025-5278
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The
CVE-2026-116900
REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by
CVE-2026-116896
REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database
CVE-2026-116880
Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin becau
CVE-2026-116876
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors
CVE-2026-116872
Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_com
CVE-2026-116842
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup
CVE-2026-116828
YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed
CVE-2026-116824
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo
CVE-2026-116820
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers t
CVE-2026-116816
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo
CVE-2026-116815
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projec
CVE-2026-116811
OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member
CVE-2026-116807
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed