#severity:high

共收录 5417 条相关情报。

← 返回所有主题
安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal...

CVE-2026-71890

In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list, org.bouncycastle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a...

CVE-2026-71888

In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle...

CVE-2026-71889

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM...

CVE-2026-71883

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no...

CVE-2026-85515

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-97660

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Ar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is...

CVE-2026-75028

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local Fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is...

CVE-2026-94505

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL...

CVE-2026-96267

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is...

CVE-2026-18443

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the...

CVE-2026-88783

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of...

CVE-2026-91078

The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of the privileged POS acco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is...

CVE-2026-96575

The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Si

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters...

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and...

CVE-2026-97337

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

CVE-2026-87091

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Par

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based...

CVE-2026-97341

The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...

CVE-2026-96650

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'platform_user_photo' Cust

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross...

CVE-2026-96564

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author

历史摘要 · 未重新核验 · GitHub Advisory