Cyber Security Daily Radar

2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0.

CVE-2026-118583

Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-863
漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature pad widget allows Stored XSS. This issue affects Signature...

CVE-2026-118575

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature p

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-79
漏洞预警2026-10-30 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, ...

CVE-2026-118582

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. Th

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-288
漏洞预警2026-10-30 发布HIGH

The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.7.5 via the plugin's own export and ...

CVE-2026-104368

The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-116#severity:high
漏洞预警2026-10-30 发布INFO

Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to 1.2.0.

CVE-2026-118573

Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 T

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-862
漏洞预警2026-10-30 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass. This issue affects OAuth Login - OAut...

CVE-2026-118572

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Aut

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-288
漏洞预警2026-10-30 发布INFO

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (conten...

CVE-2026-118568

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedde

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-922
漏洞预警2026-10-30 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1.

CVE-2026-118570

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affec

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-352
漏洞预警2026-10-30 发布INFO

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. Th...

CVE-2026-118571

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-525
漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1.

CVE-2026-118569

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versi

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-863
漏洞预警2026-10-30 发布INFO

Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, ...

CVE-2026-118559

Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This is

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-347
漏洞预警2026-10-30 发布INFO

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

CVE-2026-118561

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affe

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-73
漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Stripe allows Cross-Site Scripting (XSS). This issue affect...

CVE-2026-118560

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce St

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-79
漏洞预警2026-10-30 发布INFO

Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions: *.*.

CVE-2026-118564

Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions: *.*.

来源摘录 · NVD / GitHub Advisory

#advisory#cve
漏洞预警2026-10-30 发布INFO

Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*.

CVE-2026-118563

Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*.

来源摘录 · NVD / GitHub Advisory

#advisory#cve
漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects Bulk Update User Roles versions: from 0.0.0 to 1.0.5.

CVE-2026-118567

Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects Bulk

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-863
漏洞预警2026-10-30 发布INFO

Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko ) integration versions: *.*.

CVE-2026-118565

Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko ) integration versio

来源摘录 · NVD / GitHub Advisory

#advisory#cve
漏洞预警2026-10-30 发布INFO

Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

CVE-2026-118562

Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affect

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-502
漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This...

CVE-2026-118549

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-79
漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3....

CVE-2026-118557

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce

来源摘录 · NVD / GitHub Advisory

#advisory#cve#cwe-863