Cyber Security Daily Radar

#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布MEDIUM

Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows authenticated API clients to run arbitrary JavaScript in the ...

CVE-2026-119121

Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows auth

来源摘录 · NVD

#cve#cwe-95
漏洞预警2026-10-29 发布HIGH

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to choose which Huggi...

CVE-2026-119120

Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bod

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_before_return_html, mean_delay, and max...

CVE-2026-119119

Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails

来源摘录 · NVD

#cve#cwe-770
漏洞预警2026-10-29 发布MEDIUM

Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to intercept crawls because Chromium always launches with --ignore-...

CVE-2026-119118

Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to interce

来源摘录 · NVD

#cve#cwe-295
漏洞预警2026-10-29 发布INFO

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized r...

CVE-2026-118673

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2

来源摘录 · NVD

#cve#cwe-787
漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.

CVE-2026-118085

Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.

来源摘录 · NVD

#cve#cwe-79
漏洞预警2026-10-29 发布MEDIUM

Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.

CVE-2026-118084

Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.

来源摘录 · NVD

#cve#cwe-639
漏洞预警2026-10-29 发布HIGH

Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.

CVE-2026-118083

Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.

来源摘录 · NVD

#cve#cwe-201
漏洞预警2026-10-29 发布HIGH

Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.

CVE-2026-118082

Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.

来源摘录 · NVD

#cve#cwe-266
漏洞预警2026-10-29 发布HIGH

Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.

CVE-2026-118081

Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.

CVE-2026-118080

Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video ...

CVE-2026-118079

Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.

CVE-2026-118078

Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.

CVE-2026-118077

Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.

CVE-2026-118076

Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.

CVE-2026-118075

Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.

CVE-2026-118074

Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.

CVE-2026-118073

Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.

CVE-2026-116869

Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.

来源摘录 · NVD

#cve#cwe-502
漏洞预警2026-10-29 发布HIGH

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.

CVE-2026-116868

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.

来源摘录 · NVD

#cve#cwe-502