共收录 1778 条相关情报。
← 返回所有主题CVE-2026-53949
Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to filters on the public
CVE-2026-49269
Apple M1 GPUs retain register file data between compute shader dispatches from different processes. A sandboxed Metal at
CVE-2026-56337
Capgo before 12.128.2 contains an information disclosure vulnerability in the public.exist_app_v2 RPC function that allo
CVE-2026-56244
Capgo before 12.128.2 allows non-admin API keys to read webhook signing secrets via Supabase REST due to insufficient ro
CVE-2026-9612
The WhatsOrder – Instant Checkout for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure i
CVE-2026-9183
The 24liveblog - live blog tool plugin for WordPress is vulnerable to Exposure of Sensitive Information in versions up t
CVE-2026-47379
NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back
CVE-2026-55450
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can
CVE-2026-55447
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files th
CVE-2026-53923
CVE-2026-53923 影响 vLLM 推理引擎（版本 0.5.5 至 0.23.1rc0 之前）。漏洞存在于 GGUF 反量化内核（csrc/quantization/gguf/gguf_kernel.cu）中，因张量维度整数截断导
CVE-2026-56323
Capgo before 12.128.2 contains an information disclosure vulnerability in the /functions/v1/channel_self endpoint that a
CVE-2026-54276
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware ca
CVE-2026-53571
Vite is a frontend tooling framework for JavaScript. Prior to 8.0.16, 7.3.5, and 6.4.3, the contents of files that are s
CVE-2026-50184
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-50169
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-49356
Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an a
CVE-2026-54264
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other
CVE-2026-7167
The vulnerability arises when the system fails to properly validate the 'email' field during the authentication process,
CVE-2026-7166
Vulnerability involving the exposure of sensitive data provided without adequate protection. The API exposes email and p
CVE-2026-56242
Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns th