#CVE

共收录 63861 条相关情报。

← 返回所有主题

漏洞预警2026-10-27 发布MEDIUM

REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET parameter in index.php without validating a CSRF token. A...

CVE-2026-116895

REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET

来源摘录 · NVD

#cve #cwe-352

漏洞预警2026-10-27 发布INFO

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in k...

CVE-2026-116894

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account a

历史摘要 · 未重新核验 · NVD

#cve #cwe-613

漏洞预警2026-10-27 发布MEDIUM

REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets non-admin backend users manage packages with only a valid ...

CVE-2026-116893

REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets n

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search param...

CVE-2026-116892

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenti

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unescaped cstate param...

CVE-2026-116891

SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenti

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers to run admin-only m...

CVE-2026-116890

Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject script through Code-typed proper...

CVE-2026-116889

SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with pa

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to inject markup through an unesca...

CVE-2026-116888

SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with th

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed prop...

CVE-2026-116887

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with p

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject scripts via External identifier...

CVE-2026-116886

Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with p

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inj...

CVE-2026-116885

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdm

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via innerHTML with allo...

CVE-2026-116884

SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject HTML through schema descriptio...

CVE-2026-116883

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticate

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through Facete...

CVE-2026-116882

Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticate

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing malicious semantic property values ren...

CVE-2026-116881

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a freshly generated...

CVE-2026-116880

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin becau

来源摘录 · NVD

#cve #cwe-352

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates...

CVE-2026-116879

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task tha

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplyin...

CVE-2026-116878

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anony

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRecurringEvents by s...

CVE-2026-116877

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-p

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-770

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors to permanently protect pages by adding an Is edit protec...

CVE-2026-116876

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors

来源摘录 · NVD

#cve #cwe-862