快速搜索提示：
按厂商查询（如：microsoft）|
按产品查询（如：microsoft sql_server）
漏洞列表 359293
| CVE ID | 标题 | 严重程度 | CVSS | 发布时间 | 受影响产品 | 数据源 | 操作 |
|---|---|---|---|---|---|---|---|
| CVE-2025-14963 |
A vulnerability identified in the Trellix HX Agent driver file fekern.sys allowed a threat actor wi...
|
MEDIUM | 6.2 | 2026-02-24 |
Trellix Endpoint HX Agent (xAgent)
trellix endpoint_security
+2个
|
CVE NVD | |
| CVE-2026-27156 |
NiceGUI has XSS via Code Injection
|
MEDIUM | 6.1 | 2026-02-24 |
zauberzeug nicegui
zauberzeug nicegui
|
CVE NVD | |
| CVE-2025-62512 |
Piwigo Vulnerable to User Enumeration via Password Reset Endpoint
|
MEDIUM | 5.5 | 2026-02-24 |
Piwigo Piwigo
piwigo piwigo
|
CVE NVD | |
| CVE-2024-48928 |
Piwigo's secret key can be brute forced
|
LOW | 2.7 | 2026-02-24 |
Piwigo Piwigo
piwigo piwigo
|
CVE NVD | |
| CVE-2026-27590 |
Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport
|
HIGH | 8.9 | 2026-02-24 |
caddyserver caddy
caddyserver caddy
|
CVE NVD | |
| CVE-2026-27589 |
Caddy vulnerable to cross-origin config application via local admin API /load (caddy)
|
MEDIUM | 6.9 | 2026-02-24 |
caddyserver caddy
caddyserver caddy
|
CVE NVD | |
| CVE-2026-27588 |
Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass
|
HIGH | 7.7 | 2026-02-24 |
caddyserver caddy
caddyserver caddy
|
CVE NVD | |
| CVE-2026-27587 |
Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass
|
HIGH | 7.7 | 2026-02-24 |
caddyserver caddy
caddyserver caddy
|
CVE NVD | |
| CVE-2026-27586 |
Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed
|
HIGH | 8.8 | 2026-02-24 |
caddyserver caddy
caddyserver caddy
|
CVE NVD | |
| CVE-2026-27585 |
Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections
|
MEDIUM | 6.9 | 2026-02-24 |
caddyserver caddy
caddyserver caddy
|
CVE NVD | |
| CVE-2026-27571 |
nats-server websockets are vulnerable to pre-auth memory DoS
|
MEDIUM | 5.9 | 2026-02-24 |
nats-io nats-server
nats-io nats-server
+1个
|
CVE NVD | |
| CVE-2025-13776 |
Hard-coded database credentials in Finka software
|
HIGH | 8.6 | 2026-02-24 |
TIK-SOFT Finka-FK
TIK-SOFT Finka-KPR
+10个
|
CVE NVD | |
| CVE-2025-47904 |
Unsigned upgrade package
|
MEDIUM | 5.7 | 2026-02-24 |
Microchip Time Provider 4100
microchip timeprovider_4100_firmware
|
CVE NVD | |
| CVE-2026-27521 |
Binardat 10G08-0800GSM Network Switch Missing Login Rate Limiting
|
MEDIUM | 6.9 | 2026-02-24 |
Binardat Ltd. 10G08-0800GSM Network Switch
binardat 10g08-0800gsm_firmware
|
CVE NVD | |
| CVE-2026-27520 |
Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie
|
HIGH | 8.7 | 2026-02-24 |
Binardat Ltd. 10G08-0800GSM Network Switch
binardat 10g08-0800gsm_firmware
|
CVE NVD | |
| CVE-2026-27519 |
Binardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption Key
|
HIGH | 8.7 | 2026-02-24 |
Binardat Ltd. 10G08-0800GSM Network Switch
binardat 10g08-0800gsm_firmware
|
CVE NVD | |
| CVE-2026-27518 |
Binardat 10G08-0800GSM Network Switch CSRF
|
MEDIUM | 5.1 | 2026-02-24 |
Binardat Ltd. 10G08-0800GSM Network Switch
binardat 10g08-0800gsm_firmware
|
CVE NVD | |
| CVE-2026-27517 |
Binardat 10G08-0800GSM Network Switch XSS
|
MEDIUM | 5.1 | 2026-02-24 |
Binardat Ltd. 10G08-0800GSM Network Switch
binardat 10g08-0800gsm_firmware
|
CVE NVD | |
| CVE-2026-27516 |
Binardat 10G08-0800GSM Network Switch Plaintext Password Exposure
|
HIGH | 8.6 | 2026-02-24 |
Binardat Ltd. 10G08-0800GSM Network Switch
binardat 10g08-0800gsm_firmware
|
CVE NVD | |
| CVE-2026-27515 |
Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers
|
CRITICAL | 9.3 | 2026-02-24 |
Binardat Ltd. 10G08-0800GSM Network Switch
binardat 10g08-0800gsm_firmware
|
CVE NVD |