📊 2026-06-07 漏洞情报日报 · 200 条 · 高危 104
每日漏洞情报汇总 · 2026-06-07
📊 2026-06-07 漏洞情报日报
📋 共 200 条
🔥 高危/严重 104 条
🚨 CISA-KEV 1 条
💣 Exploit-DB-RSS 1 条
🐙 GitHub-Advisory 50 条 🔥24
🛡️ NVD-Latest 80 条 🔥80
⚔️ Sploitus 68 条
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-47668 (严重) — DbGate JSON脚本运行器未授权远程代码执行。攻击者无需认证即可通过POST /runners/start接口注入恶意functionName参数，直接执行任意系统命令。
- CVE-2026-47731 (严重) — NASA AMMOS仪器工具包路径遍历。未授权HTTP API未验证路径字段，远程攻击者可绕过配置限制，实现任意文件写入或读取。
- CVE-2026-49777 (CVSS 10.0) — WooCommerce产品滑块Pro输入数量验证缺陷。攻击者可利用该漏洞植入恶意软件，导致站点完全沦陷，严重影响电商生态。
- CVE-2026-41283 (CVSS 9.9) — OpenStack Mistral API暴露导致任意远程代码执行。攻击者可通过特定端点直接执行代码，窃取服务凭据，威胁云基础设施安全。
- CVE-2026-6274 (CVSS 9.8) — DTS Redline WR3200路由器关键功能缺乏认证。攻击者可绕过身份验证访问路由器管理功能，威胁网络边界安全。
📈 威胁趋势
- 远程代码执行 (RCE)：最严重 — 今日共有5个RCE相关漏洞，涉及DbGate、OpenStack Mistral、PDF Signer及MobaXterm。攻击者可通过未授权或低权限接口直接执行系统命令，危害极高。
- 权限提升/访问控制缺陷：高发 — Shopper、Omni等产品出现RBAC绕过或授权缺陷，可导致内部权限被恶意利用。
- 拒绝服务 (DoS) 与内存破坏：集中于硬件层 — Morse Micro HaLow Wi-Fi驱动出现两个堆溢出漏洞，物理邻近攻击者可引发DoS。Klever-Go KVM存在哈希数组放大攻击风险。
- 路径遍历与任意文件写入：持续活跃 — NASA AMMOS及DbGate的Zip Slip漏洞均允许未授权写入系统文件，极易被用于篡改配置或植入后门。
- 信息泄露 — Omni集群导入密钥未旋转，导致高权限凭据被读取。
🛡️ 缓解建议
- 立即升级或隔离受影响组件： 优先升级DbGate至最新版本，避免JSON脚本运行器暴露于公网。同时立即修补NASA AMMOS工具包及OpenStack Mistral实例。
- 加强网络边界及认证控制： 为DTS Redline WR3200等路由器设备启用强密码并限制管理端口访问；检查WooCommerce插件更新，禁用不必要的滑块功能。
- 实施纵深防御与监控：
- 审计文件解压与路径处理逻辑：
🚨 CISA-KEV（1 条）
Unknown (1 条)
- CVE-2026-28318 - SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
CVE-2026-28318
CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability 产品: SolarWinds Serv-U 描述: SolarWinds Serv-U contains an uncontrolled resource…
💣 Exploit-DB-RSS（1 条）
Unknown (1 条)
- [webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection
# Exploit Title: WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection # Google Dork: N/A # Date: 2026-06-02 # Exploit Author: cardosource #…
🐙 GitHub-Advisory（50 条）
Critical (5 条)
- CVE-2026-47668 - DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
CVE-2026-47668Critical
Summary DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script… - CVE-2026-47669 - DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE
CVE-2026-47669Critical
The `unzipDirectory()` function in `packages/api/src/shell/unzipDirectory.js` (line 27) does not validate that extracted file paths stay within the output… - CVE-2026-47670 - Authenticated Remote Code Execution via loadReader functionName code injection i
CVE-2026-47670Critical
Summary DbGate is vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials can execute arbitrary OS commands as root by… - CVE-2026-47731 - NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append
CVE-2026-47731Critical
## 1. Summary The Binary Stream Capture (BSC) component exposes an unauthenticated HTTP API for dynamically creating packet capture “handlers.” Because the… - CVE-2026-47744 - Shopper: Authorization bypass and RBAC privilege escalation in team settings
CVE-2026-47744Critical
## Impact Two distinct authorization defects in the team settings allowed any authenticated panel user to take over the RBAC system: - `Settings/Team/Index`…
High (19 条)
- CVE-2026-45726 - Omni: Reader-level users can retrieve imported cluster CA keys via ResourceServi
CVE-2026-45726High
## Summary Omni supports importing standalone Talos clusters. During this process, an ImportedClusterSecrets resource is created, which contains the full CA… - CVE-2026-47249 - Klever-Go KVM: Hash-array amplification in P2P resolver request handling
CVE-2026-47249High
Summary A connected peer can send a compressed `RequestDataType_HashArrayType` direct request that is only `442` bytes on the wire but expands into `200000`… - CVE-2026-47261 - wasmtime-wasi: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restric
CVE-2026-47261High
## Summary In `wasmtime-wasi`, when a filesystem preopen is given `DirPerms::all()` and `FilePerms::READ` without `FilePerms::WRITE`, this wasmtime-wasi… - CVE-2026-47383 - NocoDB: Stored Cross-Site Scripting via Row Comments
CVE-2026-47383High
Summary An authenticated commenter could store HTML in row comments that executed as script when other users hovered over the comment in the expanded form… - CVE-2026-47387 - NocoDB: Stored Cross-Site Scripting via Form View Redirect URL
CVE-2026-47387High
Summary The shared form-view submit handler in NocoDB writes the form's `redirect_url` to `window.location.href` after a same-host check that does not validate… - CVE-2026-47419 - praisonai-platform: Agent endpoints accept any agent_id without workspace owners
CVE-2026-47419High
## Summary **Type:** Insecure Direct Object Reference. The agent CRUD endpoints (`GET / PATCH / DELETE /workspaces/{workspace_id}/agents/{agent_id}`) gate… - CVE-2026-47684 - Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpP
CVE-2026-47684High
Summary: The private IP blocklist regex used in the URL download feature does not match IPv4-mapped IPv6 addresses (e.g. ::ffff:127.0.0.1), allowing SSRF… - CVE-2026-48017 - DbGate: Remote Code Execution via functionName injection in loadReader endpoint
CVE-2026-48017High
Summary The `POST /runners/load-reader` endpoint in DbGate accepts a `functionName` parameter that is directly interpolated into a JavaScript code template… - GHSA-hf2g-6j7h-98wg - klever-go: Unbounded goroutine spawn on direct-message ingress enables peer-driv High
Summary `networkMessenger.directMessageHandler` in `network/p2p/libp2p/netMessenger.go` spawns a fresh goroutine for every incoming direct message before the… - GHSA-w4c6-7r69-w7j9 - klever-go: REST API slow-header connection exhaustion via Gin Engine.Run High
Summary The Klever seednode REST API starts a Gin engine with `Engine.Run(restAPIInterface)`. In Gin v1.9.1, `Engine.Run` calls Go's default… - GHSA-rm5c-5x2p-48wr - Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go
CVE-2026-46403CVE-2026-44697High
## Summary Every transaction gossiped on the klever-go P2P network is decoded and validated synchronously inside the libp2p pubsub topic-validator callback.… - GHSA-wx3m-whqv-xv47 - skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file dis High
## Impact `skillctl` 0.1.0 and 0.1.1 contained four path-safety vulnerabilities that, in combination, allowed an attacker to: 1. **Exfiltrate arbitrary files… - CVE-2026-47760 - TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass throu
CVE-2026-47760High
Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using nested <svg>… - CVE-2026-47759 - TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixe
CVE-2026-47759High
Impact Stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-src, data-mce-style). Allows attackers to inject malicious… - CVE-2026-47762 - TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comment
CVE-2026-47762High
Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is… - CVE-2026-47761 - TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-ob
CVE-2026-47761High
Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted `data-mce-*` attributes, which are executed when… - CVE-2026-47743 - Shopper: Multiple data integrity and disclosure issues in admin Livewire compone
CVE-2026-47743High
## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS: - **IDOR via unlocked… - CVE-2026-24425 - Twig: Possible sandbox bypass when using a source policy
CVE-2026-24425High
# Description When using the sandbox with a `SourcePolicyInterface`, Twig does not always apply the sandbox restriction that forbids non-`Closure` callbacks… - CVE-2026-47732 - Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coer
CVE-2026-47732High
Description `SandboxNodeVisitor` enforces `SecurityPolicy::checkMethodAllowed()` for implicit `__toString()` calls by wrapping selected AST nodes in…
Medium (21 条)
- CVE-2026-47250 - MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer
CVE-2026-47250Medium
Summary The `kubectl_generic` tool in `mcp-server-kubernetes` passes user-supplied flags directly to kubectl without any allowlist, enabling a **privilege… - CVE-2026-47279 - NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints
CVE-2026-47279Medium
Summary The public shared-view relation endpoints accepted a caller-supplied column ID without verifying that the column was visible in the shared view, so… - CVE-2026-47375 - NocoDB: Postgres SQL Injection in Formula `ARRAYSORT`
CVE-2026-47375Medium
Summary An authenticated user with `columnAdd` permission on a Postgres-backed base can inject arbitrary SQL into the formula engine via the optional… - CVE-2026-47376 - NocoDB: Reflected Cross-Site Scripting via Password Reset Token
CVE-2026-47376Medium
Summary The password-reset page rendered the URL token directly into a JavaScript string literal in a server-rendered EJS template. EJS `<%= %>`… - CVE-2026-47377 - NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin
CVE-2026-47377Medium
Summary The client-side `hashRedirect` plugin called `window.location.replace()` on a path extracted from the URL hash fragment after only checking… - CVE-2026-47378 - NocoDB: Hidden Column Exposure in Public Shared View Endpoints
CVE-2026-47378Medium
Summary Public shared-view endpoints exposed values from columns that the view owner had hidden, via three independent paths: groupBy returned raw values for… - CVE-2026-47379 - NocoDB: Plaintext Password Comparison in Shared Views
CVE-2026-47379Medium
Summary The shared-view password check fell back to strict-equality (`===`) comparison for legacy plaintext passwords, leaking the password's length and… - CVE-2026-47381 - NocoDB: Cross-Workspace Integration Use in Connection Test
CVE-2026-47381Medium
Summary A user in one workspace could exercise another workspace's integration through the `testConnection` endpoint by supplying its ID, because the…
…另有 13 条 Medium 级漏洞（已省略）
Low (5 条)
- CVE-2026-47380 - NocoDB: User Enumeration via Sign-In Timing
CVE-2026-47380Low
Summary Sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash… - CVE-2026-47388 - NocoDB: Missing Ownership Check in MCP Attachment Read
CVE-2026-47388Low
Summary A low-privilege MCP token holder with knowledge of an attachment path could read any file in shared storage, including attachments belonging to other… - CVE-2026-47715 - Bugsink: Issue event views can show an event from another project if its UUID is
CVE-2026-47715Low
Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to…
…另有 2 条 Low 级漏洞（已省略）
🛡️ NVD-Latest（80 条）
Critical (20 条)
- CVE-2026-49777 Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin
CVE-2026-49777Critical 10.0
CVE-2026-49777 CVSS:10.0 Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows… - CVE-2026-41283 OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the
CVE-2026-41283Critical 9.9
CVE-2026-41283 CVSS:9.9 OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code… - CVE-2026-6274 Improper Authentication, Missing authentication for critical function, Weak Auth
CVE-2026-6274Critical 9.8
CVE-2026-6274 CVSS:9.8 Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and… - CVE-2026-7763 A heap-based buffer overflow vulnerability in the morse.ko HaLow Wi-Fi kernel dr
CVE-2026-7763Critical 9.8
CVE-2026-7763 CVSS:9.8 A heap-based buffer overflow vulnerability in the morse.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions prior… - CVE-2026-7762 A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel
CVE-2026-7762Critical 9.8
CVE-2026-7762 CVSS:9.8 A heap-based buffer overflow vulnerability in the dot11ah.ko HaLow Wi-Fi kernel driver in Morse Micro HaLowLink 2 software versions… - CVE-2019-25741 Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buff
CVE-2019-25741Critical 9.8
CVE-2019-25741 CVSS:9.8 Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of… - CVE-2019-25738 WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vuln
CVE-2019-25738Critical 9.8
CVE-2019-25738 CVSS:9.8 WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to… - CVE-2019-25729 PDF Signer 3.0 contains a server-side template injection vulnerability that allo
CVE-2019-25729Critical 9.8
CVE-2019-25729 CVSS:9.8 PDF Signer 3.0 contains a server-side template injection vulnerability that allows unauthenticated attackers to execute arbitrary code… - CVE-2019-25727 WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulner
CVE-2019-25727Critical 9.8
CVE-2019-25727 CVSS:9.8 WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to… - CVE-2026-4104 Authorization bypass through User-Controlled SQL primary key vulnerability in Ak
CVE-2026-4104Critical 9.8
CVE-2026-4104 CVSS:9.8 Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co.… - CVE-2026-50211 Leftover engineering diagnostics and factory-level diagnostic software remain ex
CVE-2026-50211Critical 9.8
CVE-2026-50211 CVSS:9.8 Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write… - CVE-2026-49191 The production build of the M3WebServer hard-codes its backend API keys, which c
CVE-2026-49191Critical 9.8
CVE-2026-49191 CVSS:9.8 The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling… - CVE-2026-49188 The ai_cmd utility executes with full root permissions. It pipes socket inputs d
CVE-2026-49188Critical 9.8
CVE-2026-49188 CVSS:9.8 The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated… - CVE-2026-49186 The local MQTT broker does not enforce topic-level Access Control Lists (ACLs).
CVE-2026-49186Critical 9.8
CVE-2026-49186 CVSS:9.8 The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard… - CVE-2026-49185 The FieldX MDM adb messaging topic passes unverified payloads directly into Runt
CVE-2026-49185Critical 9.8
CVE-2026-49185 CVSS:9.8 The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection. 产品:… - CVE-2026-11293 Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote
CVE-2026-11293Critical 9.6
CVE-2026-11293 CVSS:9.6 Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a… - CVE-2026-11282 Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 14
CVE-2026-11282Critical 9.6
CVE-2026-11282 CVSS:9.6 Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially… - CVE-2026-11250 Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53
CVE-2026-11250Critical 9.6
CVE-2026-11250 CVSS:9.6 Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the… - CVE-2026-10840 A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-roleb
CVE-2026-10840Critical 9.6
CVE-2026-10840 CVSS:9.6 A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the… - CVE-2026-50208 High-risk TrustAllCerts routines disable standard TLS certificate validation. Co
CVE-2026-50208Critical 9.4
CVE-2026-50208 CVSS:9.4 High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a…
High (60 条)
- CVE-2026-11307 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot
CVE-2026-11307High 8.8
CVE-2026-11307 CVSS:8.8 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-11306 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot
CVE-2026-11306High 8.8
CVE-2026-11306 CVSS:8.8 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-11305 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot
CVE-2026-11305High 8.8
CVE-2026-11305 CVSS:8.8 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-11304 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot
CVE-2026-11304High 8.8
CVE-2026-11304 CVSS:8.8 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a… - CVE-2026-11303 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot
CVE-2026-11303High 8.8
CVE-2026-11303 CVSS:8.8 Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-11301 Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827
CVE-2026-11301High 8.8
CVE-2026-11301 CVSS:8.8 Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform… - CVE-2026-11295 Inappropriate implementation in WebView in Google Chrome on Android prior to 149
CVE-2026-11295High 8.8
CVE-2026-11295 CVSS:8.8 Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform… - CVE-2026-11279 Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a
CVE-2026-11279High 8.8
CVE-2026-11279 CVSS:8.8 Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a… - CVE-2026-11272 Insufficient validation of untrusted input in Reading List in Google Chrome on i
CVE-2026-11272High 8.8
CVE-2026-11272 CVSS:8.8 Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who… - CVE-2026-11262 Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a rem
CVE-2026-11262High 8.8
CVE-2026-11262 CVSS:8.8 Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted… - CVE-2026-11248 Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827
CVE-2026-11248High 8.8
CVE-2026-11248 CVSS:8.8 Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation… - CVE-2026-49194 The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standa
CVE-2026-49194High 8.8
CVE-2026-49194 CVSS:8.8 The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and directly enter an… - CVE-2026-49190 The system fails to evaluate instructional permissions over multiple internal op
CVE-2026-49190High 8.8
CVE-2026-49190 CVSS:8.8 The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized… - CVE-2026-41860 CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redir
CVE-2026-41860High 8.8
CVE-2026-41860 CVSS:8.8 CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM.… - CVE-2026-49202 Internal multimedia session archives are accessible without authentication, exac
CVE-2026-49202High 8.6
CVE-2026-49202 CVSS:8.6 Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS)… - CVE-2019-25736 LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows
CVE-2019-25736High 8.4
CVE-2019-25736 CVSS:8.4 LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying… - CVE-2019-25735 AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling tha
CVE-2019-25735High 8.4
CVE-2019-25735 CVSS:8.4 AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structured exception… - CVE-2019-25733 NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow
CVE-2019-25733High 8.4
CVE-2019-25733 CVSS:8.4 NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute… - CVE-2026-11256 Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote
CVE-2026-11256High 8.3
CVE-2026-11256 CVSS:8.3 Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-49203 Crucial management API endpoints for cellular eSIM allocation do not validate ca
CVE-2026-49203High 8.3
CVE-2026-49203 CVSS:8.3 Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be… - CVE-2019-25745 WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL inject
CVE-2019-25745High 8.2
CVE-2019-25745 CVSS:8.2 WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers… - CVE-2019-25732 PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthe
CVE-2019-25732High 8.2
CVE-2019-25732 CVSS:8.2 PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by… - CVE-2019-25730 Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthent
CVE-2019-25730High 8.2
CVE-2019-25730 CVSS:8.2 Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by… - CVE-2019-25728 Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenti
CVE-2019-25728High 8.2
CVE-2019-25728 CVSS:8.2 Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by… - CVE-2019-25726 All in One Video Downloader 1.2 contains an SQL injection vulnerability that all
CVE-2019-25726High 8.2
CVE-2019-25726 CVSS:8.2 All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL… - CVE-2026-50205 System log files output unencrypted SMTP server authentication passwords alongsi
CVE-2026-50205High 8.2
CVE-2026-50205 CVSS:8.2 System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data.… - CVE-2026-41010 ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job
CVE-2026-41010High 8.2
CVE-2026-41010 CVSS:8.2 ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz")… - CVE-2026-41011 PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join
CVE-2026-41011High 8.2
CVE-2026-41011 CVSS:8.2 PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name =… - CVE-2025-59874 HCL Hive Telco Observability is affected by a Required directives missing from
CVE-2025-59874High 8.1
CVE-2025-59874 CVSS:8.1 HCL Hive Telco Observability is affected by a Required directives missing from the CSP issue is detected in keycloak component of the… - CVE-2026-11241 Insufficient validation of untrusted input in Cast in Google Chrome prior to 149
CVE-2026-11241High 8.0
CVE-2026-11241 CVSS:8.0 Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network… - CVE-2026-11332 A flaw was found in ansible-core. The ansible-galaxy role install command proces
CVE-2026-11332High 7.8
CVE-2026-11332 CVSS:7.8 A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's… - CVE-2026-50209 Broadcast events allow malicious software to rewrite the device's default Mobile
CVE-2026-50209High 7.8
CVE-2026-50209 CVSS:7.8 Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting… - CVE-2026-50207 The system Binder boundary accepts unverified pass-through AT commands, giving l
CVE-2026-50207High 7.8
CVE-2026-50207 CVSS:7.8 The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or… - CVE-2026-49189 Unchecked public access permissions on a core Broadcast Receiver allow unauthori
CVE-2026-49189High 7.8
CVE-2026-49189 CVSS:7.8 Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative… - CVE-2026-41859 A network man-in-the-middle between nats-sync and the BOSH director can steal th
CVE-2026-41859High 7.8
CVE-2026-41859 CVSS:7.8 A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client… - CVE-2026-11297 Insufficient validation of untrusted input in Reader Mode in Google Chrome on An
CVE-2026-11297High 7.7
CVE-2026-11297 CVSS:7.7 Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker… - CVE-2026-49771 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
CVE-2026-49771High 7.6
CVE-2026-49771 CVSS:7.6 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web… - CVE-2026-11296 Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.782
CVE-2026-11296High 7.5
CVE-2026-11296 CVSS:7.5 Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the… - CVE-2026-11265 Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53
CVE-2026-11265High 7.5
CVE-2026-11265 CVSS:7.5 Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data… - CVE-2026-11255 Insufficient validation of untrusted input in Storage Access API in Google Chrom
CVE-2026-11255High 7.5
CVE-2026-11255 CVSS:7.5 Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who… - CVE-2026-11242 Insufficient validation of untrusted input in Plugins in Google Chrome prior to
CVE-2026-11242High 7.5
CVE-2026-11242 CVSS:7.5 Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had… - CVE-2026-11239 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.
CVE-2026-11239High 7.5
CVE-2026-11239 CVSS:7.5 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the… - CVE-2025-46638 Dell BSAFE SSL-J contains an allocation of resources without limits or throttlin
CVE-2025-46638High 7.5
CVE-2025-46638 CVSS:7.5 Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remote attacker… - CVE-2026-50213 The account validation endpoint /v1/User/validate returns comprehensive user pro
CVE-2026-50213High 7.5
CVE-2026-50213 CVSS:7.5 The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating… - CVE-2026-50210 The device encrypts data using AES-CBC with static zero-filled Initialization Ve
CVE-2026-50210High 7.5
CVE-2026-50210 CVSS:7.5 The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks… - CVE-2026-49193 Overly permissive configuration settings on cloud storage containers expose acti
CVE-2026-49193High 7.5
CVE-2026-49193 CVSS:7.5 Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet. 产品:… - CVE-2026-49187 The hard-coded APK resource files never expire, and the shared scepter leads to
CVE-2026-49187High 7.5
CVE-2026-49187 CVSS:7.5 The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse. 产品: acer… - CVE-2026-8829 HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_e
CVE-2026-8829High 7.5
CVE-2026-8829 CVSS:7.5 HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing… - CVE-2026-41858 Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPasswo
CVE-2026-41858High 7.5
CVE-2026-41858 CVSS:7.5 Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows… - CVE-2026-10737 The SP Project & Document Manager plugin for WordPress is vulnerable to unauthor
CVE-2026-10737High 7.5
CVE-2026-10737 CVSS:7.5 The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the… - CVE-2026-50593 Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds writ
CVE-2026-50593High 7.3
CVE-2026-50593 CVSS:7.3 Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure… - CVE-2026-10877 A security vulnerability has been detected in SourceCodester Ship Ferry Ticket R
CVE-2026-10877High 7.3
CVE-2026-10877 CVSS:7.3 A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown… - CVE-2026-41567 Moby is an open source container framework. In versions prior to 29.5.1 and in m
CVE-2026-41567High 7.2
CVE-2026-41567 CVSS:7.2 Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed… - CVE-2026-10586 The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns pl
CVE-2026-10586High 7.2
CVE-2026-10586 CVSS:7.2 The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request… - CVE-2019-25737 Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability t
CVE-2019-25737High 7.2
CVE-2019-25737 CVSS:7.2 Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject… - CVE-2019-25731 Zuz Music 2.1 contains a persistent cross-site scripting vulnerability that allo
CVE-2019-25731High 7.2
CVE-2019-25731 CVSS:7.2 Zuz Music 2.1 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious… - CVE-2026-10843 A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM polici
CVE-2026-10843High 7.2
CVE-2026-10843 CVSS:7.2 A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are provisioned with… - CVE-2026-3820 There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-21
CVE-2026-3820High 7.2
CVE-2026-3820 CVSS:7.2 There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR. An attacker may obtain administrator… - CVE-2026-11269 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.
CVE-2026-11269High 7.1
CVE-2026-11269 CVSS:7.1 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position… - CVE-2025-52612 HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vul
CVE-2025-52612High 7.1
CVE-2025-52612 CVSS:7.1 HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting…
⚔️ Sploitus（68 条）
Unknown (68 条)
- Exploit for CVE-2019-5513 exploit
CVE-2019-5513
Exploit for CVE-2019-5513 exploit - Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx exploit
Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx exploit
…另有 66 条 Unknown 级漏洞（已省略）
🤖 漏洞情报自动汇总 · 2026-06-07 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV