2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

漏洞预警2026-10-30 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client ver...

CVE-2026-118554

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentica

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-288

漏洞预警2026-10-30 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.

CVE-2026-118558

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-352

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce License versions: from 0.0.0 to 3.1.1.

CVE-2026-118555

Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce L

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布INFO

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security L...

CVE-2026-118550

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Ex

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-525

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This...

CVE-2026-118552

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects A...

CVE-2026-118553

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布INFO

Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelli...

CVE-2026-118551

Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-922

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3....

CVE-2026-118556

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1...

CVE-2026-118548

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affec

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布INFO

Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2...

CVE-2026-118544

Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. T

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-202

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This...

CVE-2026-118546

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This...

CVE-2026-118545

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

CVE-2026-118541

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from ...

CVE-2026-118543

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue af

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-352

漏洞预警2026-10-30 发布INFO

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allows Object Injection. This issue affects Monster Menus ve...

CVE-2026-114573

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus all

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-915

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.2.0.

CVE-2026-118540

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

CVE-2026-118542

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布INFO

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13.

CVE-2026-118539

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core v

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-862

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field allows Stored XSS. This issue affects Data field versions...

CVE-2026-114555

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1.

CVE-2026-114554

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863