2026-10-23 归档

今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-22 发布INFO

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Pr...

CVE-2026-87945

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-10-22 发布INFO

Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Service Provider versi...

CVE-2026-87944

Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiT

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

CVE-2026-87943

Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions...

CVE-2026-87942

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.

CVE-2026-87941

Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-22 发布INFO

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue af...

CVE-2026-87940

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly

历史摘要 · 未重新核验 · NVD

#cve #cwe-525

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions...

CVE-2026-87939

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: f...

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-22 发布INFO

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central...

CVE-2026-87937

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affec...

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Refl...

CVE-2026-84924

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verif

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issu...

CVE-2026-84923

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification /

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.

CVE-2026-84921

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects We

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1....

CVE-2026-84920

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored...

CVE-2026-84919

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0....

CVE-2026-84918

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2.

CVE-2026-84917

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonap

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.

CVE-2026-84916

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blo...

CVE-2026-84915

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component b

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3.

CVE-2026-84914

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul

历史摘要 · 未重新核验 · NVD

#cve #cwe-862