2026-10-02 归档

今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-01 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookieRemove changes across intern...

CVE-2026-47360

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie modu

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-10-01 发布INFO

NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affe

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-10-01 发布INFO

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are reco...

CVE-2026-42528

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebD

历史摘要 · 未重新核验 · NVD

#cve #cwe-789

漏洞预警2026-10-01 发布INFO

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target...

CVE-2026-42356

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-430

漏洞预警2026-10-01 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been re...

CVE-2026-18734

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-01 发布INFO

The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their verifiers in drivers/smbus/smbus_handlers.c validated only th...

CVE-2026-17053

The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their veri

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of ...

CVE-2026-103690

A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-01 发布INFO

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated...

CVE-2026-103505

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-drive

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

漏洞预警2026-10-01 发布INFO

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's `Authorization` header to out...

CVE-2026-101322

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached th

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.

CVE-2026-97297

Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Contributor PHP Object Injection in Icegram <= 3.1.31 versions.

CVE-2026-97284

Contributor PHP Object Injection in Icegram <= 3.1.31 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions.

CVE-2026-97281

Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Re...

CVE-2026-97280

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configur

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

CVE-2026-97277

Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.

CVE-2026-97273

Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-01 发布INFO

Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.

CVE-2026-97269

Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-01 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.

CVE-2026-97268

Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-01 发布INFO

Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions.

CVE-2026-97260

Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.

CVE-2026-97258

Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions.

CVE-2026-97251

Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-639