目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

server 产品漏洞列表 / CVE 中文分析 143

server 产品相关 143 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。

本页面针对微软 Server 操作系统聚合展示相关的安全漏洞信息。收录了涵盖远程代码执行、权限提升及信息泄露等各类高危漏洞，覆盖时间范围自 2005 年起至今。读者可通过本页追踪微软官方安全公告的更新动态，深入了解特定版本系统中存在的结构性弱点，并检索 Server 产品线的历史漏洞记录以评估系统风险。

ベンダー: FileZilla

CVE IDタイトルCVSS深刻度公開日
CVE-2026-72855 Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and REST CWE-918 8.5 High2026-08-13
CVE-2026-72850 Budibase before 3.40.0 Arbitrary File Write via Path Traversal CWE-22 9.1 Critical2026-08-13
CVE-2026-72851 Budibase before 3.40.0 SQL Injection via Unauthenticated Webhook CWE-89 10.0 Critical2026-08-13
CVE-2026-72849 Budibase before 3.40.0 Identity Confusion via Chat-Link Handoff CSRF CWE-352 7.7 High2026-08-13
CVE-2026-73618 Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter CWE-943 8.3 High2026-08-13
CVE-2026-73617 Budibase before 3.40.0 NoSQL Injection via MongoDB datasource CWE-943 7.1 High2026-08-13
CVE-2026-71959 Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collect CWE-862 5.8 Medium2026-08-10
CVE-2026-17570 Devolutions Server权限绕过致凭证泄露漏洞 CWE-639--2026-07-27
CVE-2026-17569 Devolutions Server 信任管理问题漏洞 CWE-522--2026-07-27
CVE-2026-17568 Devolutions Server 授权问题漏洞 CWE-863--2026-07-27
CVE-2026-22104 Improper access control in Hashtopolis server chunk activity component CWE-639--2026-07-17
CVE-2026-15058 Devolutions Server 授权问题漏洞 CWE-639--2026-07-14
CVE-2026-15642 Devolutions Server 日志信息泄露漏洞 CWE-200--2026-07-14
CVE-2026-15641 Devolutions Server 授权问题漏洞 CWE-863--2026-07-14
CVE-2026-15637 Devolutions Server 授权问题漏洞 CWE-639--2026-07-14
CVE-2026-60104 Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request CWE-639 8.7 High2026-07-08
CVE-2026-14536 Devolutions Server 处理逻辑错误漏洞 --2026-07-06
CVE-2026-57522 Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates CWE-74 3.5 Low2026-06-25
CVE-2026-57521 Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController CWE-862 4.3 Medium2026-06-25
CVE-2026-57520 Bitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint CWE-862 7.1 High2026-06-25
CVE-2026-12755 Devolutions Server 输入验证错误漏洞 CWE-1284--2026-06-25
CVE-2026-47684 Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIP CWE-918 7.7 High2026-06-16
CVE-2026-48165 MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side CWE-78 8.0 High2026-06-12
CVE-2026-48163 MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) CWE-78 8.0 High2026-06-12
CVE-2026-44173 MariaDB: FILE privilege was not checked for subqueries in the FROM clause CWE-863 5.0 Medium2026-06-12
CVE-2026-44172 MariaDB: mysql_real_escape_string() incorrectly handled big5 CWE-89 6.9 Medium2026-06-12
CVE-2026-44171 MariaDB: path traversal in mbstream CWE-22 6.3 Medium2026-06-12
CVE-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions CWE-863 4.3 Medium2026-06-12
CVE-2026-44168 MariaDB: wsrep SST unsafe parameter handling on the donor side CWE-78 8.0 High2026-06-12
CVE-2026-44170 MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL CWE-78 6.3 Medium2026-06-12

server 产品累计公开 143 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。