#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged...

CVE-2026-103418

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating...

CVE-2026-103417

Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-log

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versions up to, ...

CVE-2026-102562

The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapp...

CVE-2026-102007

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG dev...

CVE-2026-75826

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUT

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Document...

CVE-2026-109106

A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. ...

CVE-2026-108975

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argu...

CVE-2026-108974

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. Thi...

CVE-2026-108973

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. An attacker wi...

CVE-2026-103316

The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated ...

CVE-2026-89271

The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users wit...

CVE-2026-89269

The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress'

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Xtreme Theme Support weaverx-theme-support allows Stored XS...

CVE-2026-54870

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Xt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.Thi...

CVE-2026-54869

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This is...

CVE-2026-54868

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Sim

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue aff...

CVE-2026-54867

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.ph...

CVE-2026-108972

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Execut...

CVE-2026-108971

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the fil...

CVE-2026-108970

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Sessi...

CVE-2026-108969

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c991

历史摘要 · 未重新核验 · NVD