#severity:high

共收录 5513 条相关情报。

← 返回所有主题
安全公告2026-05-17 发布INFO

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated...

CVE-2018-25339

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract da

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to...

CVE-2018-25328

VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction poin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer...

CVE-2018-25323

Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that...

CVE-2018-25333

Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated atta

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection...

CVE-2018-25330

Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow at

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered...

CVE-2018-25325

Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitra

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows...

CVE-2018-25329

WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows...

CVE-2018-25322

Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to exe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows...

CVE-2018-25326

Google Drive for WordPress 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to read arb

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated...

CVE-2018-25319

Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because...

CVE-2026-46728

Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted fro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that...

CVE-2021-47979

WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated at

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory...

CVE-2021-47977

WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to...

CVE-2021-47973

Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the...

CVE-2021-47971

My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers...

CVE-2021-47980

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input...

CVE-2020-37245

Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter...

CVE-2020-37243

Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows...

CVE-2020-37242

Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the...

CVE-2021-47969

Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting exc

历史摘要 · 未重新核验 · GitHub Advisory