2026-08-21 归档

今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Conte...

CVE-2026-77072

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Many, Delete, and Update operations, which built filte...

CVE-2026-77071

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row G

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as...

CVE-2026-77070

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-943

漏洞预警2026-08-20 发布INFO

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader...

CVE-2026-77068

n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-s

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-20 发布INFO

Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions.

CVE-2026-74021

Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-20 发布INFO

Unauthenticated Broken Access Control in Koji <= 2.2.1 versions.

CVE-2026-74020

Unauthenticated Broken Access Control in Koji <= 2.2.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-20 发布INFO

Unauthenticated Broken Access Control in EPROLO Dropshipping <= 2.4.2 versions.

CVE-2026-74019

Unauthenticated Broken Access Control in EPROLO Dropshipping <= 2.4.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-20 发布INFO

Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.

CVE-2026-74013

Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.

CVE-2026-73998

Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-08-20 发布INFO

Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.

CVE-2026-73402

Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in NotificationX Pro <= 3.1.4 versions.

CVE-2026-68564

Unauthenticated Cross Site Scripting (XSS) in NotificationX Pro <= 3.1.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Subscriber Broken Authentication in Leyka <= 3.32.3 versions.

CVE-2026-66677

Subscriber Broken Authentication in Leyka <= 3.32.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Flatastic <= 2.0 versions.

CVE-2026-66673

Unauthenticated Cross Site Scripting (XSS) in Flatastic <= 2.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.

CVE-2026-66647

Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Form Maker by 10Web <= 1.15.46 versions.

CVE-2026-66616

Unauthenticated Cross Site Scripting (XSS) in Form Maker by 10Web <= 1.15.46 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions.

CVE-2026-66615

Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions.

CVE-2026-66614

Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.

CVE-2026-66612

Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions.

CVE-2026-66611

Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-20 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Advance Product Search <= 1.4.8 versions.

CVE-2026-66607

Unauthenticated Cross Site Scripting (XSS) in Advance Product Search <= 1.4.8 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79