2026-10-23 归档

今日共收录 1236 条安全情报,包含 262 个 CVE,575 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-22 发布INFO

PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131

CVE-2026-84919

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135

CVE-2026-87937

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137

CVE-2026-87939

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140

CVE-2026-87942

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152

CVE-2026-87954

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxono

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153

CVE-2026-87955

Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154

CVE-2026-96360

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155

CVE-2026-96361

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158

CVE-2026-96358

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159

CVE-2026-96359

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160

CVE-2026-96362

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161

CVE-2026-96363

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

CVE-2026-96367

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163

CVE-2026-96368

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164

CVE-2026-96370

Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform v

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166

CVE-2026-96371

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167

CVE-2026-96372

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168

CVE-2026-96373

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f

历史摘要 · 未重新核验 · OSV.dev