快速搜索提示：
按厂商查询（如：microsoft）|
按产品查询（如：microsoft sql_server）
漏洞列表 358424
| CVE ID | 标题 | 严重程度 | CVSS | 发布时间 | 受影响产品 | 数据源 | 操作 |
|---|---|---|---|---|---|---|---|
| CVE-2026-1694 |
Server configuration details in HTTP headers
|
LOW | 2.3 | 2026-02-26 |
arcinfo PcVue
|
CVE NVD | |
| CVE-2026-1693 |
Use of vulnerable Resource Owner Password Credentials flow
|
MEDIUM | 5.3 | 2026-02-26 |
arcinfo PcVue
|
CVE NVD | |
| CVE-2026-1692 |
Missing origin validation in GraphicalData web service requests
|
MEDIUM | 5.3 | 2026-02-26 |
arcinfo PcVue
|
CVE NVD | |
| CVE-2026-25191 |
The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL searc...
|
HIGH | 8.4 | 2026-02-26 |
Digital Arts Inc. FinalCode Ver.5 series
Digital Arts Inc. FinalCode Ver.6 series
|
CVE NVD | |
| CVE-2026-23703 |
The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permis...
|
HIGH | 8.5 | 2026-02-26 |
Digital Arts Inc. FinalCode Ver.5 series
Digital Arts Inc. FinalCode Ver.6 series
|
CVE NVD | |
| CVE-2026-1311 |
Worry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup Upload
|
HIGH | 8.8 | 2026-02-26 |
bearsthemes Worry Proof Backup
|
CVE NVD | |
| CVE-2026-27465 |
Fleet: Sensitive Google Calendar credentials disclosed to low-privileged users
|
LOW | 1.3 | 2026-02-26 |
fleetdm fleet
fleetdm fleet
|
CVE NVD | |
| CVE-2026-25963 |
Fleet: Authorization Bypass in certificate template batch deletion for team administrators
|
LOW | 1.2 | 2026-02-26 |
fleetdm fleet
fleetdm fleet
|
CVE NVD | |
| CVE-2026-23999 |
Fleet: Device lock PIN can be predicted if lock time is known
|
LOW | 0.6 | 2026-02-26 |
fleetdm fleet
fleetdm fleet
|
CVE NVD | |
| CVE-2026-24004 |
Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint
|
LOW | 1.7 | 2026-02-26 |
fleetdm fleet
fleetdm fleet
|
CVE NVD | |
| CVE-2026-27975 |
Ajenti has a potential Remote Code Execution
|
HIGH | 8.1 | 2026-02-26 |
ajenti ajenti
ajenti ajenti
|
CVE NVD | |
| CVE-2026-1779 |
User Registration & Membership <= 5.1.2 - Authentication Bypass
|
HIGH | 8.1 | 2026-02-26 |
wpeverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
|
CVE NVD | |
| CVE-2026-2356 |
User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
|
MEDIUM | 5.3 | 2026-02-26 |
wpeverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
|
CVE NVD | |
| CVE-2026-27974 |
Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)
|
MEDIUM | 4.8 | 2026-02-26 |
advplyr audiobookshelf-app
|
CVE NVD | |
| CVE-2026-27963 |
Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata
|
MEDIUM | 4.8 | 2026-02-26 |
advplyr audiobookshelf
audiobookshelf audiobookshelf
|
CVE NVD | |
| CVE-2026-27973 |
Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)
|
MEDIUM | 4.0 | 2026-02-26 |
advplyr audiobookshelf
advplyr audiobookshelf-app
|
CVE NVD | |
| CVE-2026-27970 |
Angular i18n vulnerable to Cross-Site Scripting (XSS)
|
HIGH | 7.6 | 2026-02-26 |
angular angular
angular angular
+5个
|
CVE NVD | |
| CVE-2026-27968 |
Packistry accepts expired access tokens
|
MEDIUM | 4.3 | 2026-02-26 |
packistry packistry
packistryphp packistry
|
CVE NVD | |
| CVE-2026-27966 |
Langflow has Remote Code Execution in CSV Agent
|
CRITICAL | 9.8 | 2026-02-26 |
langflow-ai langflow
langflow langflow
|
CVE NVD | |
| CVE-2026-27969 |
Vitess users with backup storage access can write to arbitrary file paths on restore
|
CRITICAL | 9.3 | 2026-02-26 |
vitessio vitess
vitessio vitess
+1个
|
CVE NVD |