漏洞目录
15,219 份公开披露报告，按弱点、厂商与发现过程组织。每条记录保留原文溯源，不做无依据的复述。
15,219公开报告
245弱点类型
428厂商
$4,934,915披露赏金
筛选结果 15,219 份 · 本页赏金 $100
漏洞类别
弱点目录
- 信息泄露1,447信息泄露
- XSS（通用）985跨站脚本
- Unlabeled967其他弱点
- 认证缺陷（通用）790身份认证
- 访问控制缺陷（通用）772访问控制
- 反射型 XSS661跨站脚本
- 存储型 XSS643跨站脚本
- 违反安全设计原则（按标题归类）531错误配置
- 资源消耗失控526拒绝服务
- 跨站请求伪造511跨站请求伪造
- 权限提升455访问控制
- 业务逻辑错误392业务逻辑
- IDOR359不安全的直接对象引用
- 代码注入344代码执行
- 开放重定向344开放重定向
- 内存破坏（通用）320内存破坏
- SQL 注入313SQL 注入
- SSRF293服务端请求伪造
- 路径遍历243路径遍历
- 命令注入（通用）234代码执行
- 密码学问题（通用）188密码学缺陷
- DOM 型 XSS178跨站脚本
- Unlabeled145信息泄露
- 点击劫持140错误配置
主要厂商目录 · 16
最新报告
- KILL authorization trusts the presented login name instead of the authenticated anonymous accountMariaDB · 内存破坏 · 2026-09-07无赏金未评级
- RCE in AWS Amplify CLI via Prototype Chain Traversal in amplify-velocity-templateAWS VDP · 代码执行 · 2026-10-13无赏金中危
- Connector/C Out-of-bounds read from unterminated GSSAPI SPN in `parse_server_packet()`MariaDB · 内存破坏 · 2026-11-04无赏金未评级
- Connector/C Out-of-bounds read in `unpack_fields()` from short metadata fieldMariaDB · 内存破坏 · 2026-09-30无赏金未评级
- Connector/C TLS auth-switch bypass exposes plaintext password on hostname verification failureMariaDB · 密码学缺陷 · 2026-11-04 · CVE-2026-107819无赏金未评级
- Server crash (stack-overflow DoS) via unbounded recursion in MariaDB WKB GEOMETRYCOLLECTION parserMariaDB · 内存破坏 · 2026-10-11无赏金低危
- Unauthenticated disclosure of draft/private/pending post titles & IDs via Secure Custom Fields nopriv AJAX field-query handlers (post_object/relationsWordPress · 访问控制 · 2026-09-28无赏金低危
- Connector/ODBC injects unquoted column names into positioned DELETE and UPDATE via MADB_DynStrGetWhereMariaDB · SQL 注入 · 2026-11-04无赏金低危
- Connector/ODBC SQLGetDescRec treats descriptor handle as statement handle, heap OOB write on every callMariaDB · 内存破坏 · 2026-11-04无赏金低危
- Stack buffer overflow in 9 of 10 Connector/ODBC catalog functions via unbounded nameMariaDB · 内存破坏 · 2026-11-04无赏金低危
- Connector/C++ aborts client process on server session-tracking packet via std::stoiMariaDB · 拒绝服务 · 2026-11-04无赏金低危
- Connector/C++ ignores allowMultiQueries and injects savepoint names into SQLMariaDB · SQL 注入 · 2026-11-04无赏金低危
- Connector/C++ string escaper re-escapes its own output, enabling SQL injectionMariaDB · SQL 注入 · 2026-11-04无赏金低危
- ACL cache collision lets a role inherit privileges from a same-named socket userMariaDB · 身份认证 · 2026-09-07 · CVE-2026-107822无赏金低危
- @jitsi/docker-jitsi-meet: `/colibri-relay-ws/` unsafe nginx regex (OCTO relay configuration)8x8 · 跨站脚本 · 2026-08-25无赏金低危
- SSRF via URL Parser Differential in `normalize_request_url` (wlc)Weblate · 服务端请求伪造 · 2026-09-02无赏金中危
- Privilege escalation via user controlled usernames / roles and viewsMariaDB · 访问控制 · 2026-10-07 · CVE-2026-107823无赏金未评级
- Unauthenticated team "income/payments" export ignores donor privacy settings (hide_giving, hide_from_lists) and uses frozen visibility, exposing donatLiberapay · 身份认证 · 2026-08-01$100低危
- Large-site Quick Edit reparses a Contributor display name into active HTMLWordPress · 跨站脚本 · 2026-10-21无赏金低危
- MariaDB GRANT PROXY permits unauthorized authentication changes and administrator account takeoverMariaDB · 访问控制 · 2026-09-07 · CVE-2026-97380无赏金中危
- Incomplete fix for CVE-2022-23915: Mercurial argument injection in HgRepository.get_file() leads to command executionWeblate · 代码执行 · 2026-09-15 · CVE-2022-23915无赏金中危
- Stored HTML Injection (CWE-79) via Livechat Visitor NameRocket.Chat · 跨站脚本 · 2026-08-20 · CVE-2026-65644无赏金低危
- Connector/C++: heap out-of-bounds read when malicious server field length exceeds declared column length in binary result pathMariaDB · 内存破坏 · 2026-10-12无赏金低危
- Connector/J: malicious server crashes client JVM via unbounded result-set field-count allocation in ClientMessage.readPacketMariaDB · 拒绝服务 · 2026-09-30无赏金低危
- Connector/ODBC: malicious server's long version string wraps size_t PrefixLen via negative _snprintf return, causing heap out-of-bounds writeMariaDB · 内存破坏 · 2026-10-12无赏金低危