#CVE

共收录 57397 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布MEDIUM

Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Classic UI. Due to insufficient sanitization of the From hea...

CVE-2026-66912

Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Cla

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布MEDIUM

Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due to lack of sanitization of the Content-Location header, ...

CVE-2026-66911

Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

CVE-2026-62131

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.

CVE-2026-62018

Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.

CVE-2026-62017

Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

CVE-2026-62016

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

CVE-2026-62015

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

CVE-2026-62014

Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.

CVE-2026-62013

Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.

CVE-2026-62012

Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

CVE-2026-62011

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

CVE-2026-62010

Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.

CVE-2026-62009

Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.

CVE-2026-62008

Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.

CVE-2026-62006

Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

CVE-2026-62005

Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.

CVE-2026-62004

Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

CVE-2026-62003

Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.

CVE-2026-62002

Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.

CVE-2026-62001

Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.

来源摘录 · NVD