#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布INFO

Rejected reason: Reserved in error; never associated with a vulnerability.

CVE-2026-117692

Rejected reason: Reserved in error; never associated with a vulnerability.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its templa...

CVE-2026-115223

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being store

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmars...

CVE-2026-112198

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The applicatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke rem...

CVE-2026-112197

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-110541

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3....

CVE-2026-110540

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password...

CVE-2026-110508

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement t

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notif...

CVE-2026-106648

The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substit

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3....

CVE-2026-103799

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3....

CVE-2026-103792

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-103780

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-103779

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secre...

CVE-2026-103330

The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifi

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirm...

CVE-2026-103313

The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confi

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an auth...

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not p

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating paymen...

CVE-2026-101273

Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented interna

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API...

CVE-2026-101272

The mechanism binding files generated during a shredding process to the authentication method is not working correctly a

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Pro...

CVE-2025-30414

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cl

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-92665

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86394

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD