共收录 56389 条相关情报。
← 返回所有主题CVE-2026-62055
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly
CVE-2026-61826
Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/a
CVE-2026-61806
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-61805
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-61804
myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category`
CVE-2026-61803
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-61789
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL
CVE-2026-55551
ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id
CVE-2026-50000
SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen
CVE-2026-39375
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version
CVE-2026-37468
Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary
CVE-2026-119466
Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Si
CVE-2026-119367
Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting
CVE-2026-119365
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Pla
CVE-2026-119300
Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.
CVE-2026-119299
gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes a
CVE-2026-119298
croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the rec
CVE-2026-119148
Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS
CVE-2026-119116
A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS
CVE-2026-115642
In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in poss