2026-10-10 归档

今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: fr...

CVE-2026-94641

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP us

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-...

CVE-2026-94632

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommer...

CVE-2026-94568

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme...

CVE-2026-94415

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Bethem

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS....

CVE-2026-94170

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sa

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue a...

CVE-2026-94167

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects ...

CVE-2026-94166

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolut

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue...

CVE-2026-94161

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand R

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Donations totaldonations allows Stored XSS.This issue affect...

CVE-2026-94159

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Don

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This iss...

CVE-2026-94158

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bkninja Gloria Adm

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In CTR mo...

CVE-2026-71884

In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested inp

历史摘要 · 未重新核验 · NVD

#cve #cwe-323

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue ...

CVE-2026-62049

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBloc

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-09 发布INFO

The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site is...

CVE-2026-84224

The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing use

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-09 发布INFO

The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of their moderati...

CVE-2026-84220

The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders

历史摘要 · 未重新核验 · NVD

#cve #cwe-74

漏洞预警2026-10-09 发布INFO

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointe...

CVE-2026-107655

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-10-09 发布INFO

Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nes...

CVE-2026-104635

Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remot

历史摘要 · 未重新核验 · NVD

#cve #cwe-674

漏洞预警2026-10-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() sk_protocol lives in struct sock, not in s...

CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_s

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program can invalidate its cached SRH ...

CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices __bpf_offload_dev_match() falls back to comparing offd...

CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other device

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-09 发布INFO

In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_channels() tears down XDP resources for re...

CVE-2026-98381

In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel re

历史摘要 · 未重新核验 · NVD

#cve