云虫漏洞库：CVE 自动同步更新。

搜索

• CVE-2026-7557 [危急] CVE-2026-7557 - An improper verification of cryptographic signature vulnerability in the S… (CVE) 2026-08-05
• CVE-2026-7329 [危急] CVE-2026-7329 - An improper privilege management vulnerability in the SQL, SPARQL, and Opt… (CVE) 2026-08-05
• CVE-2026-7327 [高危] CVE-2026-7327 - An improper privilege management vulnerability in the REST API document pr… (CVE) 2026-08-05
• CVE-2026-7326 [高危] CVE-2026-7326 - A cross-site request forgery vulnerability in the Admin UI of Progress Mar… (CVE) 2026-08-05
• CVE-2026-54876 [高危] CVE-2026-54876 - Issue summary: A malicious TLS server can cause a memory leak in a TLS cl… (CVE) 2026-08-05
• CVE-2026-0516 [中危] CVE-2026-0516 - A improper neutralization of HTTP Headers for Scripting Syntax vulnerabili… (CVE) 2026-08-05
• CVE-2026-71204 [中危] CVE-2026-71204 - changedetection.io's /settings save handler builds an update dict from fo… (CVE) 2026-08-05
• CVE-2026-71203 [中危] CVE-2026-71203 - changedetection.io's REST API resources are protected by an @auth.check_t… (CVE) 2026-08-05
• CVE-2026-71202 [高危] CVE-2026-71202 - The raster Rust crate's crop function (src/editor.rs) clamps the crop wid… (CVE) 2026-08-05
• CVE-2026-70378 [高危] CVE-2026-70378 - imagecli's pipeline operation (Carve::apply in src/image_ops.rs) only ass… (CVE) 2026-08-05
• CVE-2026-70377 [高危] CVE-2026-70377 - imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes… (CVE) 2026-08-05
• CVE-2026-70376 [危急] CVE-2026-70376 - Pluck CMS's admin panel relies solely on a Referer-header comparison (req… (CVE) 2026-08-05
• CVE-2026-55747 [中危] CVE-2026-55747 - The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow imp… (CVE) 2026-08-05
• CVE-2026-55739 [高危] CVE-2026-55739 - Crater isolates data per company_id, and its Invoice/Estimate/Payment/Exp… (CVE) 2026-08-05
• CVE-2026-54418 [高危] CVE-2026-54418 - Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.Tw… (CVE) 2026-08-05
• CVE-2026-54416 [高危] CVE-2026-54416 - Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin fi… (CVE) 2026-08-05
• CVE-2026-70375 [高危] CVE-2026-70375 - HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerabilit… (CVE) 2026-08-05
• CVE-2026-70374 [高危] CVE-2026-70374 - HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerabilit… (CVE) 2026-08-05
• CVE-2026-21766 [中危] CVE-2026-21766 - The default login portlet in HCL Digital Experience and Digital Experienc… (CVE) 2026-08-05
• CVE-2026-14587 [高危] CVE-2026-14587 - Neo4j's Bolt modern handshake decoder treats an overlong capability bit m… (CVE) 2026-08-05