2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows Stored XSS. This issue affects ABC versions: from 0.0.0 t...

CVE-2026-114525

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1.

CVE-2026-114524

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue

来源摘录 · NVD

#cve #cwe-267

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue a...

CVE-2026-114523

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpe

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin Theme allows Cross-Site Scripting (XSS). This issue affect...

CVE-2026-110738

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin T

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Dr...

CVE-2026-108515

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Dr...

CVE-2026-108514

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity L...

CVE-2026-108099

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List

来源摘录 · NVD

#cve #cwe-470

漏洞预警2026-10-30 发布INFO

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal cor...

CVE-2026-108097

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core a

来源摘录 · NVD

#cve #cwe-470

漏洞预警2026-10-30 发布INFO

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.

CVE-2026-107266

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versi

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Distribution allows Stored XSS. This issue affects Sector Dis...

CVE-2026-107260

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Dist

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue affects Shield versions: from 0.0.0 to 1.9.0.

CVE-2026-107256

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue

来源摘录 · NVD

#cve #cwe-307

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 ...

CVE-2026-107255

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restri

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-30 发布INFO

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the...

CVE-2026-73322

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is e

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863

漏洞预警2026-10-30 发布MEDIUM

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should r...

CVE-2026-119148

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS

来源摘录 · NVD

#cve #cwe-807

漏洞预警2026-10-30 发布MEDIUM

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values ...

CVE-2026-7003

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-798 #severity:medium

漏洞预警2026-10-30 发布HIGH

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth ...

CVE-2026-119762

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-30 发布MEDIUM

Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject script via unesc...

CVE-2026-119761

Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows un

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布HIGH

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong ...

CVE-2026-119760

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthent

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-10-30 发布HIGH

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handl...

CVE-2026-119717

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute P

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-30 发布HIGH

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. A...

CVE-2026-119716

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to exe

来源摘录 · NVD

#cve #cwe-94