| CVE-2025-15413 |
wasm3 op_SetSlot_i32/op_CallIndirect函数内存损坏漏洞(CVE-2... |
中危 |
5.3 |
2026-01-01 |
| CVE-2025-15412 |
WebAssembly wabt wasm-decompile越界读取漏洞 |
中危 |
5.3 |
2026-01-01 |
| CVE-2025-15411 |
WebAssembly wabt wasm-decompile内存损坏漏洞 |
中危 |
5.3 |
2026-01-01 |
| CVE-2025-15410 |
code-projects Online Guitar Store 1.0 /login.php S... |
高危 |
7.3 |
2026-01-01 |
| CVE-2025-15409 |
code-projects Online Guitar Store 1.0 SQL注入漏洞 |
高危 |
7.3 |
2026-01-01 |
| CVE-2025-15408 |
code-projects在线吉他商店Create_product.php SQL注入漏洞 |
高危 |
7.3 |
2026-01-01 |
| CVE-2025-15407 |
Online Guitar Store 1.0 SQL注入漏洞 |
高危 |
7.3 |
2026-01-01 |
| CVE-2025-15406 |
PHPGurukul在线课程注册系统授权绕过漏洞 |
中危 |
6.3 |
2026-01-01 |
| CVE-2025-15405 |
PHPEMS up to 11.0 跨站请求伪造(CSRF)漏洞 |
中危 |
4.3 |
2026-01-01 |
| CVE-2025-15404 |
campcodes School File Management System 1.0 无限制文件上... |
中危 |
6.3 |
2026-01-01 |
| CVE-2025-14627 |
WordPress WP Ultimate CSV Importer插件SSRF漏洞 |
中危 |
6.4 |
2026-01-01 |
| CVE-2025-14428 |
WordPress My Sticky Elements插件未授权数据删除漏洞 |
中危 |
4.3 |
2026-01-01 |
| CVE-2025-13820 |
WordPress Comments插件身份验证绕过漏洞（CVE-2025-13820） |
中危 |
5.3 |
2026-01-01 |
| CVE-2025-11157 |
Feast Kubernetes Materializer 远程代码执行漏洞 |
高危 |
7.8 |
2026-01-01 |
| CVE-2025-69288 |
Titra时间追踪软件远程代码执行漏洞 |
严重 |
9.1 |
2025-12-31 |
| CVE-2025-69286 |
RAGFlow 0.22.0之前版本API密钥与Token可相互推导漏洞 |
严重 |
9.8 |
2025-12-31 |
| CVE-2025-69277 |
libsodium crypto_core_ed25519_is_valid_point椭圆曲线点验... |
中危 |
4.5 |
2025-12-31 |
| CVE-2025-68885 |
WordPress Custom Post Status插件CSRF导致存储型XSS漏洞 |
高危 |
7.1 |
2025-12-31 |
| CVE-2025-68700 |
RAGFlow Canvas CodeExec远程代码执行漏洞 |
高危 |
8.8 |
2025-12-31 |
| CVE-2025-68131 |
cbor2库CBORDecoder内存数据泄露漏洞 |
高危 |
7.5 |
2025-12-31 |
| CVE-2025-67711 |
Esri ArcGIS Server存储型XSS漏洞 |
中危 |
6.1 |
2025-12-31 |
| CVE-2025-67710 |
Esri ArcGIS Server 存储型XSS漏洞 |
中危 |
6.1 |
2025-12-31 |
| CVE-2025-67709 |
Esri ArcGIS Server存储型XSS漏洞 |
中危 |
6.1 |
2025-12-31 |
| CVE-2025-67708 |
Esri ArcGIS Server存储型XSS跨站脚本漏洞 |
中危 |
6.1 |
2025-12-31 |
| CVE-2025-67707 |
ArcGIS Server 文件上传漏洞 |
中危 |
5.6 |
2025-12-31 |
| CVE-2025-67706 |
ArcGIS Server任意文件上传漏洞 |
中危 |
5.6 |
2025-12-31 |
| CVE-2025-67705 |
Esri ArcGIS Server存储型XSS漏洞 |
中危 |
6.1 |
2025-12-31 |
| CVE-2025-67704 |
Esri ArcGIS Server存储型跨站脚本漏洞 |
中危 |
6.1 |
2025-12-31 |
| CVE-2025-67703 |
Esri ArcGIS Server存储型XSS漏洞 |
中危 |
6.1 |
2025-12-31 |
| CVE-2025-66160 |
Graphist Elementor插件访问控制缺陷漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66159 |
Walker for Elementor 缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66158 |
Gmaper for Elementor插件缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66157 |
WordPress Sliper for Elementor插件缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66156 |
WordPress Watcher for Elementor插件授权缺失漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66155 |
WordPress Questionar for Elementor插件缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66154 |
WordPress Couponer Elementor插件缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66153 |
Headinger for Elementor插件授权缺失漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66152 |
Criptopayer for Elementor插件存在缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66151 |
WordPress Countdowner Elementor插件授权缺失漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66150 |
WordPress Appender插件缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66149 |
UnGrabber WordPress插件存在授权缺失漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66148 |
Conformer for Elementor插件缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66146 |
Logger for Elementor插件授权缺失漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66145 |
WordPress Worker for WPBakery插件缺失授权访问控制漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-66144 |
WordPress Worker for Elementor插件缺失授权漏洞 |
中危 |
5.4 |
2025-12-31 |
| CVE-2025-64699 |
| SevenCs ORCA G2错误NULL DACL本地权限提升漏洞 |
高危 |
7.8 |
2025-12-31 |
| CVE-2025-63053 |
WordPress Master Addons for Elementor插件IDOR授权绕过漏洞 |
中危 |
5.3 |
2025-12-31 |
| CVE-2025-63040 |
WordPress Post Snippets插件跨站请求伪造漏洞 |
中危 |
4.3 |
2025-12-31 |
| CVE-2025-63038 |
WordPress wp-custom-admin-interface插件访问控制漏洞 |
中危 |
4.3 |
2025-12-31 |
| CVE-2025-63032 |
WordPress Consulting主题存储型XSS漏洞 |
中危 |
6.5 |
2025-12-31 |