共收录 2015 条相关情报。
← 返回所有主题CVE-2026-82630
A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnecti
CVE-2026-82556
A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/mig
CVE-2026-82556
A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/mig
CVE-2026-82638
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers t
CVE-2026-82638
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers t
CVE-2026-82476
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata f
CVE-2026-82476
CVE-2026-82476 影响 Memos 0.30.0 及更早版本。该漏洞源于其链接元数据抓取器在进行 SSRF 防护时未正确过滤 100.64.0.0/10 这个运营商级 NAT（CGNAT）地址范围。由于该范围内的 IP 地址可能
CVE-2026-82476
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata f
CVE-2026-82477
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal netw
CVE-2026-82477
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal netw
CVE-2026-82477
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal netw
CVE-2026-77012
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated end
CVE-2026-16947
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path b
CVE-2026-16600
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does
CVE-2026-77012
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated end
CVE-2026-16947
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path b
CVE-2026-16600
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does
CVE-2026-18545
IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
CVE-2026-18545
IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
CVE-2026-82289
Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab.,