共收录 63078 条相关情报。
← 返回所有主题CVE-2026-103875
The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search-string'
CVE-2026-103485
The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feat
CVE-2026-85498
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authenticatio
CVE-2026-7190
A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnera
CVE-2026-115303
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted fi
CVE-2026-114358
This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the
CVE-2026-117174
Rejected reason: VUL-2026-008368 為先回報之相同問題
CVE-2025-62841
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac
CVE-2025-62839
An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac
CVE-2026-118030
A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and ac
CVE-2026-117859
A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue oc
CVE-2026-117688
A flaw was found in the client registration component of Keycloak, an open-source identity and access management solutio
CVE-2026-117627
A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Googl
CVE-2026-117548
A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an at
CVE-2026-93293
The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's
CVE-2026-89216
The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL stat
CVE-2026-88928
The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signature on its payment not
CVE-2026-86794
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public ev
CVE-2026-85007
The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJA
CVE-2026-78396
The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose