2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-30 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service t...

CVE-2026-109821

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an a

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-1284 #cwe-400

漏洞预警2026-10-30 发布MEDIUM

Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) ...

CVE-2026-107251

Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: LaTeX for Drupal allows Cross-Site Scripting (XSS). This is...

CVE-2026-107252

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: La

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Lo...

CVE-2026-107254

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-288

漏洞预警2026-10-30 发布MEDIUM

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.

CVE-2026-107257

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream version

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布MEDIUM

Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6.

CVE-2026-107258

Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects I

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布MEDIUM

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Lo...

CVE-2026-107261

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-288

漏洞预警2026-10-30 发布MEDIUM

Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7.

CVE-2026-107263

Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg version

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter F...

CVE-2026-107264

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field all

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-1336

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from...

CVE-2026-107265

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet all

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versions: from 0.0.0 to 1.6.3, from 2.0.0 to 2.0.4, from 3.0.0 t...

CVE-2026-96389

Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit version

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing. This issue affects Two F...

CVE-2026-107268

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-201

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.5.

CVE-2026-107267

Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3.

CVE-2026-107307

Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布LOW

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country allows Cross-Site Scripting (XSS). This issue affects Countr...

CVE-2026-107308

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country all

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-30 发布LOW

Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11.

CVE-2026-107309

Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcru

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3.

CVE-2026-107310

Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue af

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-918

漏洞预警2026-10-30 发布LOW

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from ...

CVE-2026-107311

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsin

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-754

漏洞预警2026-10-30 发布MEDIUM

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Allocation. This issue affects Examples for Developers vers...

CVE-2026-107312

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Al

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-770

漏洞预警2026-10-30 发布MEDIUM

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1...

CVE-2026-107262

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This is

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-352