共收录 1077 条相关情报。
← 返回所有主题CVE-2026-54047
Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the backend prior t
CVE-2026-71416
Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket
CVE-2026-86781
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or
CVE-2026-14563
The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authentica
CVE-2026-14559
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating th
CVE-2026-82107
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information
CVE-2026-88007
## Summary Traefik's HTTP/3 request path did not initialize the connection-scoped backend transport holder that isolate
CVE-2026-88018
### Summary `rclone serve s3`'s handler chain, when `--auth-proxy` is configured, is (outermost first): `authPairMiddlew
CVE-2026-82107
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information
CVE-2026-87016
## Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match i
CVE-2026-88018
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1
CVE-2026-88018
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1
CVE-2026-88007
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypo
CVE-2026-88007
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypo
CVE-2026-88895
CyberPanel before 3.0.5 fails to enforce two-factor authentication on API endpoints, allowing attackers to bypass TOTP r
CVE-2026-77771
The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its secon
CVE-2026-87924
A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c
CVE-2026-87922
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e0
CVE-2026-87016
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user
CVE-2026-87016
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user