#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布HIGH

The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, and including, 1.5.0 due to insufficient escaping on the u...

CVE-2026-110184

The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, a

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG fi...

CVE-2026-109822

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive in

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'profile_background[<attacker-chosen key>]' parameter i...

CVE-2026-109216

The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory ...

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from 4.21.0 before 4.22.2. WebhookUrlValidator classified ...

CVE-2026-71569

Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with ...

CVE-2026-33924

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient va

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with adm...

CVE-2026-33923

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent valid

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in download_remote_file that allows shop_manager users to...

CVE-2026-118989

WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or admin-scoped API keys or oma_ access tokens to change the ma...

CVE-2026-118984

OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or adm

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-f...

CVE-2026-116409

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell O

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication Abuse.This issue affects Login with phone number: from n/...

CVE-2026-115967

Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows Blind SQL Injection.This issue affe...

CVE-2026-115965

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPr

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blin...

CVE-2026-115964

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Secu...

CVE-2026-115963

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration all

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCred: from n/a through 4.0.1.

CVE-2026-115962

Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.This issue affects myCr

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accep...

CVE-2026-115942

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certif

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue...

CVE-2026-115611

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net Table

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: fro...

CVE-2026-115599

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access C

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP oceanwp allows Reflected XSS.This issue affects OceanWP: fr...

CVE-2026-115592

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP oc

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass. However there wi...

CVE-2026-114230

When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL fr

来源摘录 · NVD