2026-10-06 归档

今日共收录 1258 条安全情报,包含 460 个 CVE,421 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-05 发布INFO

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a dat...

CVE-2026-63268

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a doc...

CVE-2026-63267

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a lin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7.

CVE-2026-39783

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or ...

CVE-2026-105396

Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data...

CVE-2026-105073

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W...

CVE-2026-103684

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Confi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This...

CVE-2026-94669

Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

The email media type OAuth form passes the Authorization endpoint value to window.open() without validating the URL scheme, so a javascript: URL is executed in the browser. This...

CVE-2026-59788

The email media type OAuth form passes the Authorization endpoint value to window.open() without validating the URL sche

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can ...

CVE-2026-59787

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix tr...

CVE-2026-59786

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from...

CVE-2026-59785

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input lea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked da...

CVE-2026-59782

The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels...

CVE-2026-39763

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupCon...

CVE-2026-105291

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the componen...

CVE-2026-105290

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/In

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormMode...

CVE-2026-105289

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_deco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The text parser passes the empty...

CVE-2026-19395

In Qt for MCUs, a Text element that displays styled text halts the device if an tag in the text contains an attribute w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions....

CVE-2026-105288

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexCon

历史摘要 · 未重新核验 · NVD