The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to,...
CVE-2026-15660
The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. Thi
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in...
CVE-2026-15760
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty'...
CVE-2026-77820
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all
SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon...
CVE-2026-93921
SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only
The application protects access through its calculator-style vault passcode, but the stored data...
CVE-2026-77875
The application protects access through its calculator-style vault passcode, but the stored data is not bound to that au
A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this...
CVE-2026-93574
A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding...
CVE-2026-93562
A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote
vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel...
CVE-2026-93841
vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs ind
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:...
CVE-2026-93871
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticate
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler...
CVE-2026-93873
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to
vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output...
CVE-2026-93840
vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in Sampling
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler,...
CVE-2026-93870
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function...
CVE-2026-93869
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect de
A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition...
CVE-2026-91205
A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation
A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing...
CVE-2026-91203
A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a syml
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by...
CVE-2026-91202
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory co
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands...
CVE-2026-81623
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileg
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-82890
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due t
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in...
CVE-2026-11711
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service componen
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to...
CVE-2026-17262
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP