共收录 3925 条相关情报。
← 返回所有主题CVE-2026-110023
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sens
CVE-2026-103997
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5
CVE-2025-11455
The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c
CVE-2026-89270
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to au
CVE-2026-11396
The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disc
CVE-2026-116557
The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to
CVE-2026-109386
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass
CVE-2026-92294
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file d
CVE-2026-92294
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file d
CVE-2026-118759
## Summary The Kubeflow Pipelines API server's `GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log` handler retrieves
CVE-2026-116794
### Summary The agent server in `russh::keys::agent::server` never calls `Agent::confirm` before signing with a key tha
CVE-2026-116677
## Summary The authenticated REST API endpoint for downloading a CA Certificate Revocation List resolves the requested
CVE-2026-55147
LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project
CVE-2026-55146
LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project
CVE-2026-62989
Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `packages/admin/src/Li
CVE-2026-62967
ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenti
CVE-2026-78403
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Ove
CVE-2026-62301
MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video access
CVE-2026-119337
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/cha
CVE-2026-116248
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Sha