The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or...
CVE-2026-92423
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the req
#advisory
共收录 23494 条相关情报。
← 返回所有主题The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability...
CVE-2026-85017
The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX actio
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not...
CVE-2026-87839
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of t
aiyiyi121 SxDevOps settings.py information disclosure
CVE-2026-93971
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo
aiyiyi121 SxDevOps Settings settings.py hard-coded credentials
CVE-2026-93970
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil
aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials
CVE-2026-93969
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup
aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
aiyiyi121 SxDevOps Command services.py generate_host_task command injection
CVE-2026-93967
A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of th
aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection
CVE-2026-93966
A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SS
aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection
CVE-2026-93965
A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops
NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication
CVE-2026-93964
A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCe
【DDoS 防护】关于计费模式升级的公告
【DDoS 防护】关于计费模式升级的公告
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup...
CVE-2026-94083
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected...
CVE-2026-94084
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.r
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This...
CVE-2026-93959
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function...
CVE-2026-93958
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/
A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function...
CVE-2026-93957
A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleF
The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve...
CVE-2026-86551
The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows...
CVE-2026-94056
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uni
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of...
CVE-2026-94054
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.