2026-10-30 归档

今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。

漏洞预警2026-10-27 发布MEDIUM

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-118319

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory i

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-10-27 发布MEDIUM

Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium sec...

CVE-2026-118322

Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-07-30 发布LOW

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

CVE-2026-41709

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform

来源摘录 · NVD

#cve #cwe-778

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

CVE-2026-91219

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily...

CVE-2026-91215

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer). Supported versions that are affected are 12.2.1.4.0...

CVE-2026-91213

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Compos

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-29 发布MEDIUM

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stm_l...

CVE-2026-80069

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authen

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by ...

CVE-2026-80067

MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Sub

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布INFO

SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier, `@sd-jwt/decode`, also used by `@sd-jwt/core`, si...

CVE-2026-62374

SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and e

来源摘录 · NVD

#cve #cwe-176 #cwe-754

漏洞预警2026-10-29 发布MEDIUM

Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Exploiting Incorrectly Configured Access Control Secu...

CVE-2026-54871

Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder all

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-29 发布MEDIUM

Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Use...

CVE-2026-52708

Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-29 发布MEDIUM

Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Use...

CVE-2026-48884

Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-builder allows Code Injection.This issue affects Brave: fr...

CVE-2026-48202

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-b

来源摘录 · NVD

#cve #cwe-80

漏洞预警2026-10-29 发布MEDIUM

Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: fro...

CVE-2026-39782

Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access C

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-29 发布HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects Jet...

CVE-2026-39736

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngi

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registration user-registration allows Code Injection.This issue af...

CVE-2026-25467

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registrat

来源摘录 · NVD

#cve #cwe-80

漏洞预警2026-10-29 发布MEDIUM

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

CVE-2026-25450

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-29 发布MEDIUM

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious Wasm modules to panic the host because the may_leave flag...

CVE-2026-119141

Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious

来源摘录 · NVD

#cve #cwe-1265

漏洞预警2026-10-29 发布MEDIUM

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerability that allows guests to crash the host through recursive type drops. Guests can defi...

CVE-2026-119137

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a stack overflow vulnerability that allows guests to cra

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-29 发布HIGH

Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user ...

CVE-2026-119115

Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer)

来源摘录 · NVD

#cve #cwe-863