2026-10-03 归档

今日共收录 1361 条安全情报,包含 499 个 CVE,489 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-02 发布INFO

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::tran...

CVE-2026-91135

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a res...

CVE-2026-85494

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...

CVE-2026-85493

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: be

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recom...

CVE-2026-85483

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59668

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59667

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59666

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of...

CVE-2026-104606

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Ke...

CVE-2026-97652

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflecte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-95662

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue...

CVE-2026-94639

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apac...

CVE-2026-94635

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects...

CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerabilit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data. This issue affects Download Manager: from n...

CVE-2026-94405

Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a t...

CVE-2026-94180

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all versions up to, and including, 2....

CVE-2026-87920

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buff

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripti...

CVE-2026-85492

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue a...

CVE-2026-80298

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59673

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary cod...

CVE-2026-59672

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

历史摘要 · 未重新核验 · NVD