#CVE

共收录 57397 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布LOW

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redir...

CVE-2026-59385

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, en

来源摘录 · NVD

漏洞预警2026-10-30 发布LOW

A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ lib...

CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminat

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to ...

CVE-2026-115274

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service t...

CVE-2026-109821

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an a

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthentica...

CVE-2026-82104

In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 thr

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for c...

CVE-2026-115455

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, interna

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigge...

CVE-2026-114691

A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffer. A local attack...

CVE-2026-114690

A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementa

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to, and including, 3.1.2 due to insufficient input sanitiza...

CVE-2026-97645

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field / Rich-Text Paragraph Field Values in all versions up to...

CVE-2026-90437

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions ...

CVE-2026-89435

The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vul

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when...

CVE-2026-118952

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a diff

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a local_bh imbalance in seg6_input_c...

CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'service_time' parameter in all versions up to, and incl...

CVE-2026-116622

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.8.6 This is due...

CVE-2026-110732

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorizatio

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This i...

CVE-2026-103039

The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.0.0 This is d...

CVE-2026-119087

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypa

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts() function in versio...

CVE-2026-119059

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capabi

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Injection via the 'pgroup' parameter in all versions up to, ...

CVE-2026-118698

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Inj

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.3.1 due to insufficient ...

CVE-2026-118634

The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all

来源摘录 · NVD