今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-107052
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attack
CVE-2026-107051
Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arb
CVE-2026-107049
An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supply
CVE-2026-107048
An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute
CVE-2026-107047
Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the ap
CVE-2026-107046
A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows att
CVE-2026-107045
Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized atta
CVE-2026-107044
Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily mani
CVE-2026-107043
Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SM
CVE-2026-93327
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versio
CVE-2026-85268
A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase A
CVE-2026-75882
An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with s
CVE-2026-51832
An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a
CVE-2026-51831
An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a
CVE-2026-46560
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module op
CVE-2026-46499
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11,
CVE-2026-13303
HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store
CVE-2026-119682
An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine S
CVE-2026-119680
A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to i
CVE-2026-119168
HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration th