#severity:medium

共收录 5482 条相关情报。

← 返回所有主题
安全公告2026-08-23 发布INFO

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an...

CVE-2026-78051

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-23 发布INFO

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin...

CVE-2026-18027

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerab

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior...

CVE-2026-69236

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior...

CVE-2026-69232

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior...

CVE-2026-69235

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior...

CVE-2026-69230

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5...

CVE-2026-69234

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior...

CVE-2026-69231

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior...

CVE-2026-69233

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior...

CVE-2026-69228

There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remot

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows...

CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak he

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through...

CVE-2026-69225

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that...

CVE-2026-69229

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authent

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and...

CVE-2026-69224

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under diff

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the...

CVE-2026-77795

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceControl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0...

CVE-2026-67362

Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4...

CVE-2026-67358

Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0...

CVE-2026-67360

Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection...

CVE-2026-67361

Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.2

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin

## Summary Grav 2.0 renders editor-authored Twig in page content by default and relies on the Twig content sandbox to c

历史摘要 · 未重新核验 · GitHub Advisory