#CVE
共收录 63078 条相关情报。
← 返回所有主题 漏洞预警2026-10-28 发布LOW
CVE-2026-118276
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString o
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-118275
A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-116613
The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and incl
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-111727
The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vs_text_subm
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-111255
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-97019
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headlin
来源摘录 · NVD
漏洞预警2026-10-28 发布CRITICAL
CVE-2026-84999
The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-118384
GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-118378
Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-118377
mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthentica
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-118376
WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-p
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-118375
llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() f
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-118374
LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exh
来源摘录 · NVD
漏洞预警2026-10-28 发布LOW
CVE-2026-118373
LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP UR
来源摘录 · NVD
漏洞预警2026-10-28 发布LOW
CVE-2026-118372
LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers by
来源摘录 · NVD
漏洞预警2026-10-28 发布LOW
CVE-2026-118371
LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url()
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-118370
libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows att
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-118274
A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality o
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-118273
A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-117610
libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlpar
来源摘录 · NVD