安全史上的今天（2024-10-21）安全事件列表。
【中文导读】该 CVE 涉及路径遍历（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.
【中文导读】该 CVE 涉及安全缺陷（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells.
【中文导读】该 CVE 涉及命令注入（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.
【中文导读】TS Poll WordPress plugin 存在SQL 注入风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
【中文导读】该 CVE 涉及内存破坏（严重风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Stack-based buffer overflow vulnerability exists in ELECOM wireless access points. By processing a specially crafted HTTP request, arbitrary code may be executed.