AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...
CVE-2018-25417
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S
2026-05-31 归档
今日共收录 804 条安全情报，包含 64 个 CVE，387 篇安全通告，以及 99 篇研究论文。
← 返回归档列表eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated...
CVE-2018-25406
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated...
CVE-2018-25405
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb
In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove...
CVE-2026-46242
In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct
A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function...
CVE-2026-10117
A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the...
CVE-2026-10119
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of
A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the...
CVE-2026-10116
A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_sbi_xact_add in
A vulnerability was identified in Open5GS up to 2.7.7. This affects an unknown part in the...
CVE-2026-10115
A vulnerability was identified in Open5GS up to 2.7.7. This affects an unknown part in the library lib/sbi/nnrf-handler.
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is...
CVE-2026-7465
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Ex
The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable...
CVE-2026-7459
The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscr
A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function...
CVE-2026-10114
A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the lib
A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown...
CVE-2026-10113
A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the libr
A vulnerability was detected in code-projects Student Details Management System 1.0. This affects...
CVE-2026-10110
A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of
A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown...
CVE-2026-10111
A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Logi
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown...
CVE-2026-10112
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the compon
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading...
CVE-2026-48840
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of unini
PraisonAI has an Arbitrary File Write in Python API
CVE-2026-47397
# Bug Report: Arbitrary File Write in Python API ## Summary Hidden metadata in a webpage causes PraisonAI agents to wr
PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate
CVE-2026-47394
## Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four
PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings
CVE-2026-47390
### Summary PraisonAI's `spider_tools` URL validation can be bypassed using alternate loopback host encodings. The aff
PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334
CVE-2026-47398
Arbitrary code execution via ungated spec.loader.exec_module in agents_generator.py (v4.6.32 chokepoint refactor bypass)