2026-10-03 归档

今日共收录 1361 条安全情报,包含 499 个 CVE,489 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-02 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Access Control Securi...

CVE-2026-39444

Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamurai: fr...

CVE-2026-39439

Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aira...

CVE-2026-32585

Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retr...

CVE-2026-32584

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown functio...

CVE-2026-104638

A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function add_patient/add_p...

CVE-2026-104637

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of th...

CVE-2026-104625

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, co...

CVE-2026-104026

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A mali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by ...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including, 2.5.2.1 due to insuff...

CVE-2026-93875

The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue ...

CVE-2026-85215

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator ...

CVE-2026-104721

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php....

CVE-2026-104614

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown proce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This...

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, wh...

CVE-2026-96289

Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...

CVE-2026-96287

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: be

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Uncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which...

CVE-2026-96286

Uncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are re...

CVE-2026-96277

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versio...

CVE-2026-94658

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: bef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended...

CVE-2026-94657

Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affec

历史摘要 · 未重新核验 · NVD