共收录 69535 条相关情报。
← 返回所有主题CVE-2015-20125
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated
CVE-2015-20124
Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthent
CVE-2015-20123
Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated
CVE-2014-125134
ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers t
CVE-2014-125133
NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attack
CVE-2014-125132
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unaut
CVE-2014-125131
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inj
CVE-2012-20005
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthe
CVE-2012-20004
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthentic
CVE-2012-20003
Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unau
CVE-2012-20002
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthen
CVE-2026-86413
When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl coul
CVE-2026-86412
A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the ne
CVE-2026-86411
An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy ha
CVE-2026-86410
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly u
CVE-2026-86409
Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentatio
CVE-2026-113869
When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decryp
CVE-2026-113868
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was va
CVE-2026-113867
Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming request
CVE-2026-113866
When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service ov