2026-10-29 归档
今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。
← 返回归档列表 漏洞预警2026-10-28 发布HIGH
CVE-2026-111255
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-109999
The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media &
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-109972
The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-109381
The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 T
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-109236
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predic
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-107625
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-103996
The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored C
来源摘录 · NVD
漏洞预警2026-10-28 发布INFO
CVE-2026-103506
An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-103404
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Sma
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-100105
A user with permission to edit contact points but not their protected fields can change protected settings, such as a co
来源摘录 · NVD
漏洞预警2024-11-21 发布MEDIUM
CVE-2024-52616
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementi
来源摘录 · NVD
漏洞预警2024-11-21 发布MEDIUM
CVE-2024-52615
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies at
来源摘录 · NVD
漏洞预警2023-11-02 发布MEDIUM
CVE-2023-38473
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
来源摘录 · NVD
漏洞预警2023-11-02 发布MEDIUM
CVE-2023-38472
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
来源摘录 · NVD
漏洞预警2023-11-02 发布MEDIUM
CVE-2023-38471
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
来源摘录 · NVD
漏洞预警2023-11-02 发布MEDIUM
CVE-2023-38470
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
来源摘录 · NVD
漏洞预警2023-11-02 发布MEDIUM
CVE-2023-38469
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
来源摘录 · NVD
漏洞预警2026-10-20 发布HIGH
CVE-2015-20125
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated
来源摘录 · NVD
漏洞预警2026-10-28 发布MEDIUM
CVE-2014-125136
C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information d
来源摘录 · NVD
漏洞预警2026-10-20 发布MEDIUM
CVE-2014-125132
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unaut
来源摘录 · NVD