#CVE
共收录 63078 条相关情报。
← 返回所有主题 漏洞预警2026-10-29 发布HIGH
CVE-2026-110184
The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, a
来源摘录 · NVD
漏洞预警2026-10-29 发布MEDIUM
CVE-2026-109822
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive in
来源摘录 · NVD
漏洞预警2026-10-29 发布MEDIUM
CVE-2026-109216
The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-103665
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari
来源摘录 · NVD
漏洞预警2026-10-29 发布MEDIUM
CVE-2026-71569
Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component.
This issue affects Apache Camel: from
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-33924
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient va
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-33923
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent valid
来源摘录 · NVD
漏洞预警2026-10-29 发布MEDIUM
CVE-2026-118989
WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability
来源摘录 · NVD
漏洞预警2026-10-29 发布MEDIUM
CVE-2026-118984
OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or adm
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-116409
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell O
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-115967
Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-115965
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPr
来源摘录 · NVD
漏洞预警2026-10-29 发布CRITICAL
CVE-2026-115964
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-115963
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration all
来源摘录 · NVD
漏洞预警2026-10-29 发布MEDIUM
CVE-2026-115962
Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCr
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-115942
A misconfigured wildcard TLS certificate causes a stack read overflow.
This issue does not affect any wildcard certif
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-115611
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net Table
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-115599
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access C
来源摘录 · NVD
漏洞预警2026-10-29 发布HIGH
CVE-2026-115592
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP oc
来源摘录 · NVD
漏洞预警2026-10-29 发布CRITICAL
CVE-2026-114230
When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL fr
来源摘录 · NVD