#CVE

共收录 58438 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布MEDIUM

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. T...

CVE-2026-109592

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorizati

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.14...

CVE-2026-107630

The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authoriz

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to Privilege Escalation in all versions up to, and including,...

CVE-2026-105894

The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to P

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' parameter in all versions up to, and including, 2.15.5 due...

CVE-2026-104744

The Independent Analytics Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' p

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupport...

CVE-2026-104739

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion d

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.5.15 via the multi_media field. This is due to the ...

CVE-2026-102918

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includi

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to th...

CVE-2026-102905

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in al

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database...

CVE-2025-8574

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8.

CVE-2026-65566

Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe...

CVE-2026-62055

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/api/plex/oauth.py` omits `@authenticate` on its Resource h...

CVE-2026-61826

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/a

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.54.2, unpublished certificate records can be retrieved ...

CVE-2026-61806

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.54.0, quiz submission records are not adequately author...

CVE-2026-61805

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布HIGH

myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category` management store the `name` parameter without adequate b...

CVE-2026-61804

myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category`

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, the `course/certificate checkout` flow accepts cl...

CVE-2026-61803

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL validation can be bypassed on the MySQL and MariaDB conne...

CVE-2026-61789

DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in `src/main/kotlin/nl/info/zac/app/zaak/...

CVE-2026-55551

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.5...

CVE-2026-50000

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role ...

CVE-2026-39375

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messagin...

CVE-2026-37468

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary

来源摘录 · NVD