漏洞列表 359408
CVE ID 标题 严重程度 CVSS 发布时间 受影响产品 数据源 操作
CVE-2025-40539
SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
CRITICAL 9.1 2026-02-24
SolarWinds Serv-U solarwinds serv-u
CVE NVD
CVE-2025-40538
SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability
CRITICAL 9.1 2026-02-24
SolarWinds Serv-U solarwinds serv-u
CVE NVD
CVE-2025-15386
Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSS
HIGH 8.8 2026-02-24
Unknown Responsive Lightbox & Gallery
CVE NVD
CVE-2025-15589
MuYuCMS Template Management Template.php delete_dir_file path traversal
MEDIUM 5.1 2026-02-24
muyucms muyucms
CVE NVD
CVE-2026-24314
Information Disclosure vulnerability in S/4HANA (Manage Payment Media)
MEDIUM 4.3 2026-02-24
SAP_SE S/4HANA (Manage Payment Media) SAP_SE S/4HANA (Manage Payment Media) +12个
CVE NVD
CVE-2026-3070
SourceCodester Modern Image Gallery App upload.php cross site scripting
MEDIUM 5.3 2026-02-24
SourceCodester Modern Image Gallery App remyandrade modern_image_gallery_app
CVE NVD
CVE-2026-3069
itsourcecode Document Management System edtlbls.php sql injection
MEDIUM 6.9 2026-02-24
itsourcecode Document Management System admerc document_management_system
CVE NVD
CVE-2026-3068
itsourcecode Document Management System deluser.php sql injection
MEDIUM 6.9 2026-02-24
itsourcecode Document Management System admerc document_management_system
CVE NVD
CVE-2026-3067
HummerRisk Archive Extraction CommandUtils.java extractZip path traversal
MEDIUM 5.3 2026-02-24
hummerrisk hummerrisk
CVE NVD
CVE-2026-3066
HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection
MEDIUM 5.3 2026-02-24
hummerrisk hummerrisk
CVE NVD
CVE-2026-27461
Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause
MEDIUM 6.9 2026-02-24
pimcore pimcore pimcore pimcore +1个
CVE NVD
CVE-2026-1459
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program...
HIGH 7.2 2026-02-24
Zyxel VMG3625-T50B firmware zyxel vmg8623-t50b_firmware +5个
CVE NVD
CVE-2026-27129
Cloud Metadata SSRF Protection Bypass via IPv6 Resolution
MEDIUM 5.7 2026-02-24
craftcms cms craftcms cms +2个
CVE NVD
CVE-2026-27128
Craft CMS's race condition in Token Service potentially allows for token usage greater than the token limit
MEDIUM 6.9 2026-02-24
craftcms cms craftcms cms +3个
CVE NVD
CVE-2026-27127
Craft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebinding
HIGH 7.0 2026-02-24
craftcms cms craftcms cms +3个
CVE NVD
CVE-2025-13943
A post-authentication command injection vulnerability in the log file download function of the Zyxel...
HIGH 8.8 2026-02-24
Zyxel EX3301-T0 firmware zyxel ee5301-00_firmware +51个
CVE NVD
CVE-2025-13942
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions thro...
CRITICAL 9.8 2026-02-24
Zyxel EX3510-B0 firmware zyxel wx5610-b0_firmware +17个
CVE NVD
CVE-2026-3065
HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection
MEDIUM 5.3 2026-02-24
hummerrisk hummerrisk
CVE NVD
CVE-2026-3064
HummerRisk Cloud Task Scheduler ResourceCreateService.java command injection
MEDIUM 5.3 2026-02-24
hummerrisk hummerrisk
CVE NVD
CVE-2026-3091
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows...
MEDIUM 6.7 2026-02-24
Synology Synology Presto Client synology presto_client
CVE NVD