共收录 5426 条相关情报。
← 返回所有主题CVE-2026-44203
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect auth
CVE-2026-18063
The Job Postings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'position_button' parameter i
CVE-2026-15402
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to S
CVE-2026-90850
A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown function
CVE-2026-90848
A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component St
CVE-2026-90845
A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the
CVE-2026-85657
The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu
CVE-2026-85575
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widg
CVE-2026-90835
A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the
CVE-2026-81900
Concrete CMS before 9.5.3 applied only trim() to the YouTube block's stored width and height values and printed them int
CVE-2026-18116
Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in
CVE-2026-18117
Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because th
CVE-2026-81903
Concrete CMS versions 9.0.0 to 9.5.2 stored the Page Container icon value submitted through the dashboard without valida
CVE-2026-7884
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their
CVE-2026-78415
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and
CVE-2026-13276
IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2
CVE-2026-18119
Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them into page C
CVE-2026-16186
IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability.
CVE-2026-90931
LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated
CVE-2026-89268
QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping