2026-10-28 归档

今日共收录 2009 条安全情报,包含 1141 个 CVE,471 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-28 发布INFO

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerabili...

CVE-2026-106013

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declar...

CVE-2026-110879

jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its gene

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector co...

CVE-2026-58256

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an adminis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization ...

CVE-2026-116692

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session ...

CVE-2026-112352

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the curre...

CVE-2026-48360

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacke...

CVE-2026-114595

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-105781

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-priv...

CVE-2026-105780

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security...

CVE-2026-105779

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-105489

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-104354

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbi...

CVE-2026-104353

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the conte...

CVE-2026-104351

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a...

CVE-2026-104350

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could expl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a thr...

CVE-2026-116863

Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Req

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET commi...

CVE-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of pr...

CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary log...

CVE-2026-117532

REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin tha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 -...

CVE-2026-86577

Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00

历史摘要 · 未重新核验 · NVD