2026-10-29 归档

今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。

漏洞预警2026-10-28 发布INFO

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, allowing attackers with access to POST config.xml API endpo...

CVE-2026-117613

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, al

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布INFO

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attribute during XStream deserialization.

CVE-2026-117612

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by th

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布MEDIUM

The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509 package also has its own internal de...

CVE-2026-116641

The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. Howe

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-295 #severity:high

漏洞预警2026-10-28 发布INFO

Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support...

CVE-2026-116593

Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its REST API to validate co

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布INFO

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main liste...

CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners i

来源摘录 · NVD

#cve

漏洞预警2026-10-29 发布INFO

An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an i...

CVE-2026-113957

An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布INFO

An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or an environment variable from the broker host and return i...

CVE-2026-112375

An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-28 发布INFO

Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array, collection, or byte buffer, with no check against the by...

CVE-2026-111551

Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array,

来源摘录 · NVD

#cve #cwe-20 #cwe-400 #cwe-789

漏洞预警2026-10-28 发布INFO

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctuation time as timestamp + (intervalsMissed + 1) * interval...

CVE-2026-111496

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctua

来源摘录 · NVD

#cve #cwe-190 #cwe-835

漏洞预警2026-10-28 发布INFO

Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender and retain a RawTaggedField object for each unknown field. ...

CVE-2026-111115

Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender an

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布INFO

Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sender. That count is checked only against the bytes remaini...

CVE-2026-111108

Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sen

来源摘录 · NVD

#cve #cwe-400 #cwe-770 #cwe-789

漏洞预警2026-10-28 发布INFO

A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidator) selects its implementation from configuration. When s...

CVE-2026-110985

A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidat

来源摘录 · NVD

#cve #cwe-1287 #cwe-345 #cwe-347 #cwe-636

漏洞预警2026-10-28 发布INFO

A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies the JWT signature, but two further checks are only perfor...

CVE-2026-110952

A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies

来源摘录 · NVD

#cve #cwe-1188 #cwe-345

漏洞预警2026-10-28 发布MEDIUM

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (C...

CVE-2026-106484

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker

来源摘录 · NVD / OSV.dev / GitHub Advisory

#advisory #cve #cwe-284 #severity:medium

漏洞预警2026-10-26 发布HIGH

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such...

CVE-2026-116230

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown

来源摘录 · NVD

#cve #cwe-20 #cwe-502

漏洞预警2026-10-29 发布HIGH

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to, and includi...

CVE-2026-96767

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布HIGH

The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption in all versions up to, and i...

CVE-2026-96741

The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Ou

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布HIGH

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'service_type' Cookie in all versions up to, and including, ...

CVE-2026-96669

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'se

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布HIGH

The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter in all versions up to, ...

CVE-2026-96666

The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布HIGH

SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public final_login_ajax_action handler resolv...

CVE-2026-96228

SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,

来源摘录 · NVD

#cve #cwe-287