#severity:medium

共收录 5624 条相关情报。

← 返回所有主题
安全公告2026-05-20 发布INFO

RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

CVE-2026-45792

RTK (Rust Token Killer) improperly trusts project-local configuration files. In versions prior to 0.32.0, RTK automatica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via ...

CVE-2026-5075

The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

A stored cross-site scripting vulnerability has been found in the Talend Administration Center....

CVE-2026-9056

A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permiss

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker...

CVE-2026-24215

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized...

CVE-2026-24142

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized...

CVE-2025-15369

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path...

CVE-2026-24208

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an ...

CVE-2026-24160

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a n

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up...

CVE-2026-8418

The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-8420

The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection...

CVE-2026-7472

The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' paramet

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in...

CVE-2026-8610

The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF...

CVE-2026-8626

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all version

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site...

CVE-2026-8624

The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Param

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-8627

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] var

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-7462

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-8424

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and ...

CVE-2026-8685

The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

CVE-2026-8038

The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-8419

The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

历史摘要 · 未重新核验 · GitHub Advisory