2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-10-28 发布HIGH

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 ...

CVE-2026-111255

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot plugin for WordPress is vulnerable to Stored ...

CVE-2026-109999

The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media &

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripti...

CVE-2026-109972

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 This is due to the mep_grant_shop_manager_access() functio...

CVE-2026-109381

The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 T

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predictable Email-Verification Token in all versions up to, and...

CVE-2026-109236

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predic

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Script...

CVE-2026-107625

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versio...

CVE-2026-103996

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored C

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana...

CVE-2026-103506

An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive rout...

CVE-2026-103404

An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Sma

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integratio...

CVE-2026-100105

A user with permission to edit contact points but not their protected fields can change protected settings, such as a co

来源摘录 · NVD

漏洞预警2024-11-21 发布MEDIUM

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavio...

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementi

来源摘录 · NVD

漏洞预警2024-11-21 发布MEDIUM

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

CVE-2024-52615

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies at

来源摘录 · NVD

漏洞预警2023-11-02 发布MEDIUM

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

CVE-2023-38473

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

来源摘录 · NVD

漏洞预警2023-11-02 发布MEDIUM

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

CVE-2023-38472

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

来源摘录 · NVD

漏洞预警2023-11-02 发布MEDIUM

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

CVE-2023-38471

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

来源摘录 · NVD

漏洞预警2023-11-02 发布MEDIUM

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

CVE-2023-38470

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

来源摘录 · NVD

漏洞预警2023-11-02 发布MEDIUM

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

CVE-2023-38469

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file...

CVE-2015-20125

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in ...

CVE-2014-125136

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information d

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' pa...

CVE-2014-125132

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unaut

来源摘录 · NVD