2026-10-29 归档

今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registration user-registration allows Code Injection.This issue af...

CVE-2026-25467

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registrat

来源摘录 · NVD

#cve #cwe-80

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Blocks cozy-addons allows Stored XSS.This issue affects Coz...

CVE-2026-24533

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Bl

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布MEDIUM

Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal...

CVE-2026-22386

Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-29 发布MEDIUM

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component ...

CVE-2026-118590

A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-400 #cwe-789 #severity:medium

漏洞预警2026-10-29 发布MEDIUM

A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42.py of the component VTK Reader. Executing a manipulation...

CVE-2026-118589

A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-400 #cwe-789 #severity:medium

漏洞预警2026-10-29 发布MEDIUM

A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file feedfinder2.py. Performing a manipulation results in s...

CVE-2026-118586

A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the fi

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-918 #severity:medium

漏洞预警2026-10-29 发布LOW

A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad931c218140df4fb23809d4fab. This vulnerability affects unk...

CVE-2026-118585

A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #cwe-94 #severity:low

漏洞预警2026-10-28 发布MEDIUM

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipula...

CVE-2026-118578

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #cwe-284 #severity:low

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component Request Forwarder. The manipulation leads to ser...

CVE-2026-118577

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the c

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-918 #severity:low

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Render...

CVE-2026-118538

A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTr

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-913 #cwe-915 #severity:medium

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catalog/components/Image.js of the component Image Player/Vide...

CVE-2026-118537

A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catal

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-20 #severity:medium

漏洞预警2026-10-29 发布MEDIUM

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'team_id' parameter in all versions up to,...

CVE-2026-118192

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad I...

CVE-2026-118094

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布MEDIUM

Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This iss...

CVE-2026-118093

Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incor

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects ...

CVE-2026-118087

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site R

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue a...

CVE-2026-116857

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmar

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布MEDIUM

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 7.9.1 due to insufficient...

CVE-2026-116763

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-f...

CVE-2026-116409

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell O

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForms sureforms allows Code Injection.This issue affects Sure...

CVE-2026-116402

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForm

来源摘录 · NVD

#cve #cwe-80

漏洞预警2026-10-29 发布HIGH

Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request Forgery.This issue affects InstaWP Connect: from n/a through...

CVE-2026-116399

Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request For

来源摘录 · NVD

#cve #cwe-352