Cyber Security Daily Radar

#远程利用

共收录 3 条相关情报。

← 返回所有主题
漏洞预警2026-07-30 发布HIGH

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure o...

CVE-2026-48448

Adobe Campaign Classic (ACC) 存在 SQL 注入漏洞。攻击者可通过网络远程利用该漏洞，无需用户交互即可实现敏感内存信息泄露，进而获取文件系统读取权限。该漏洞的影响范围发生改变（Scope Changed），机密性

历史摘要 · 未重新核验 · NVD

#cve#cwe-89#SQL注入#Adobe#内存泄露#文件读取
漏洞预警2026-07-26 发布MEDIUM

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/Exte...

CVE-2026-17459

CVE-2026-17459 是 SparkJava (perwendel/spark) 组件中的一个路径遍历漏洞，影响版本 up to 2.9.4。该漏洞位于 ExternalResourceHandler.java 文件的 static

历史摘要 · 未重新核验 · NVD

#cve#cwe-59#cwe-61#CVE#SparkJava#路径遍历
漏洞预警2026-07-12 发布MEDIUM

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Call Recording Handl...

CVE-2026-15474

Eleveo Call Recording Software 9.7.0 版本中存在一个安全漏洞，位于组件 Call Recording Handler 的文件 /callrec/audio.jsp 中。该漏洞源于对参数 callId 的操

历史摘要 · 未重新核验 · NVD

#cve#cwe-266#cwe-285#CVE-2026-15474#Eleveo#Call Recording