#CVE

共收录 63078 条相关情报。

漏洞预警2026-10-27 发布MEDIUM

In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands

CVE-2026-117530

In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted command

来源摘录 · NVD

#cve #cwe-184

漏洞预警2026-10-27 发布INFO

In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.

CVE-2026-117466

In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full s

来源摘录 · NVD

#cve #cwe-269

漏洞预警2026-10-27 发布INFO

In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is linked to a space, a user in that sp...

CVE-2026-117341

In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. Wh

来源摘录 · NVD

#cve #cwe-532

漏洞预警2026-10-27 发布MEDIUM

REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by storing unescaped values rendered by media, medialist, li...

CVE-2026-116900

REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices in unauthorized categories by pairing a permitted article ...

CVE-2026-116899

REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices i

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-27 发布INFO

REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authen...

CVE-2026-116898

REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-27 发布MEDIUM

REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history frontend preview modes, which do not check category or cl...

CVE-2026-116897

REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布HIGH

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backup[export] ...

CVE-2026-116896

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布MEDIUM

REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET parameter in index.php without validating a CSRF token. A...

CVE-2026-116895

REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET

来源摘录 · NVD

#cve #cwe-352

漏洞预警2026-10-27 发布INFO

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in k...

CVE-2026-116894

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account a

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-10-27 发布MEDIUM

REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets non-admin backend users manage packages with only a valid ...

CVE-2026-116893

REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets n

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search param...

CVE-2026-116892

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenti

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unescaped cstate param...

CVE-2026-116891

SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenti

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers to run admin-only m...

CVE-2026-116890

Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject script through Code-typed proper...

CVE-2026-116889

SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with pa

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to inject markup through an unesca...

CVE-2026-116888

SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with th

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed prop...

CVE-2026-116887

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with p

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject scripts via External identifier...

CVE-2026-116886

Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with p

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inj...

CVE-2026-116885

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdm

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via innerHTML with allo...

CVE-2026-116884

SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79