#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This...

CVE-2026-108492

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows S...

CVE-2026-108490

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Emb...

CVE-2026-108489

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-element...

CVE-2026-108488

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue ...

CVE-2026-108487

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Boo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects...

CVE-2026-108179

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

CVE-2026-108174

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Conf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a thro...

CVE-2026-106598

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

CVE-2026-106597

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue...

CVE-2026-105881

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration allows Cross Site Request Forgery.This issue affects User Registration: from n/...

CVE-2026-103076

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration allows Cross Site Requ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authentic...

CVE-2026-101020

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer...

CVE-2026-89097

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

CVE-2026-67165

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insuffici...

CVE-2026-15399

The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.

CVE-2026-14308

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature va

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1.

CVE-2026-109703

Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings...

CVE-2026-109109

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument...

CVE-2026-109108

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cook...

CVE-2026-109107

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /c

历史摘要 · 未重新核验 · NVD