#CVE

共收录 56584 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigge...

CVE-2026-114691

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attack...

CVE-2026-114690

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementa

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to, and including, 3.1.2 due to insufficient input sanitiza...

CVE-2026-97645

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field Values in all versions up to...

CVE-2026-90437

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions ...

CVE-2026-89435

The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vul

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when...

CVE-2026-118952

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a diff

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a local_bh imbalance in seg6_input_c...

CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'service_time' parameter in all versions up to, and incl...

CVE-2026-116622

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.8.6 This is due...

CVE-2026-110732

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorizatio

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This i...

CVE-2026-103039

The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.0.0 This is d...

CVE-2026-119087

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypa

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts() function in versio...

CVE-2026-119059

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capabi

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'pgroup' parameter in all versions up to, ...

CVE-2026-118698

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.3.1 due to insufficient ...

CVE-2026-118634

The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the '_elementor_data.form_fields[].cu...

CVE-2026-118500

The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.1 This is due to the `papr_restrict_page_post...

CVE-2026-118194

The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inc

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic lightbox before inserting it into the page as HTML, which could al...

CVE-2026-118165

The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic lightbox

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry is the author of the target post, allowing users who have been granted edit a...

CVE-2026-118101

The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry is the author of the

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporting its configuration, allowing unauthenticated users to...

CVE-2026-118100

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before expor

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to manage orders before letting them add an order's customer det...

CVE-2026-118072

The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to mana

来源摘录 · NVD