2026-07-11 归档

今日共收录 1315 条安全情报,包含 488 个 CVE,410 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
安全公告2026-07-11 发布INFO

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

CVE-2026-11913

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-15085

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI SEO/GEO

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...

CVE-2026-55804

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows...

CVE-2026-55806

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This is

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-15084

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Patterns

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-15081

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Se

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper encoding of non-finite floating-point values during MapMessage JSON serialization in...

CVE-2026-49844

Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request...

CVE-2026-55807

Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request Forgery. This issue af

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-15082

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Siteimprove

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...

CVE-2026-55810

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-55808

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...

CVE-2026-15083

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal ECA: Event - Cond

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...

CVE-2026-55809

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...

CVE-2026-55803

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue...

CVE-2026-13236

Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions:

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable...

CVE-2026-15079

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable allows Brute Force. This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue...

CVE-2026-13240

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs version

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross...

CVE-2026-15080

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-13242

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Geolocation

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue...

CVE-2026-13241

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs version

历史摘要 · 未重新核验 · GitHub Advisory