2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scrip...

CVE-2026-116227

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtua

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-48398

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-83958

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布MEDIUM

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

CVE-2026-88137

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over

来源摘录 · NVD

#cve #cwe-552

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

CVE-2026-88158

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln...

CVE-2026-110081

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencin...

CVE-2026-110082

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attack

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布HIGH

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security fea...

CVE-2026-110083

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-31 发布INFO

Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth Assent allows an unauthenticated remote attacker to impers...

CVE-2026-117656

Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth A

来源摘录 · NVD

#cve #cwe-290 #cwe-349

漏洞预警2026-10-13 发布HIGH

Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A low-privileged attacker coul...

CVE-2026-110084

Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in

来源摘录 · NVD

#cve #cwe-91

漏洞预警2026-10-30 发布MEDIUM

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitra...

CVE-2026-7004

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allow

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-30 发布HIGH

Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

CVE-2026-78527

Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-502 #severity:high

漏洞预警2026-10-30 发布MEDIUM

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through `Point#mul` or `scalar_multiply_c...

CVE-2026-63410

secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar

来源摘录 · NVD

#cve #cwe-1255 #cwe-208

漏洞预警2026-10-30 发布MEDIUM

i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` checks property existence with the in operator and recurses ...

CVE-2026-63402

i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` che

来源摘录 · NVD

#cve #cwe-1321 #cwe-471

漏洞预警2026-10-30 发布INFO

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and `removeAccessibleQueuesForUser` accepted arbitrary `queueId` and `...

CVE-2026-63401

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and `removeAc

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-30 发布INFO

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the password row without invalidating database-backed sessions. An ...

CVE-2026-63400

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the passwo

来源摘录 · NVD

#cve #cwe-613

漏洞预警2026-10-30 发布INFO

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operation allows an unauthenticated actor to create arbitrary or...

CVE-2026-63399

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operati

来源摘录 · NVD

#cve #cwe-306 #cwe-799

漏洞预警2026-10-30 发布INFO

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolved the authenticated user by email alone using `kyselyUse...

CVE-2026-63398

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolv

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-30 发布INFO

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.allOrgs` through `/api/v1/graphql` on a publicly accessib...

CVE-2026-63396

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-30 发布INFO

OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 until 2.19.6.0, and the 3.x line prior to 3.7.0.0, a remot...

CVE-2026-63393

OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 u

来源摘录 · NVD

#cve #cwe-502