2026-10-04 归档

今日共收录 931 条安全情报,包含 128 个 CVE,457 篇安全通告,以及 95 篇研究论文。

← 返回归档列表
安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a...

CVE-2026-71888

In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle...

CVE-2026-71889

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM...

CVE-2026-71883

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no...

CVE-2026-85515

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and...

CVE-2026-97873

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ra

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function...

CVE-2026-104982

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting...

CVE-2026-92767

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...

CVE-2026-93896

The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-97660

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Ar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is...

CVE-2026-75028

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local Fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is...

CVE-2026-11601

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authoriz

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is...

CVE-2026-94505

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerable to Reflected...

CVE-2026-104313

The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL...

CVE-2026-96267

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in...

CVE-2026-100157

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is...

CVE-2026-18443

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in...

CVE-2026-103519

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-93889

The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for...

CVE-2026-97343

The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to I

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to...

CVE-2026-15795

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Script

历史摘要 · 未重新核验 · GitHub Advisory