#CVE

共收录 63886 条相关情报。

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the ar...

CVE-2026-116101

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function o

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipu...

CVE-2026-116100

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-26 发布HIGH

A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the function BlitzBanks of the component Skynet++ Virtual Mach...

CVE-2026-116099

A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.295. This issue affects the f

来源摘录 · NVD

#cve #cwe-119 #cwe-787

漏洞预警2026-10-26 发布HIGH

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map...

CVE-2026-116098

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoint

来源摘录 · NVD

#cve #cwe-20 #cwe-502

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname lea...

CVE-2026-116097

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addne

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-25 发布MEDIUM

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpeg_turbo::decode_jpeg_rgb of the file crates/multimodal/src/jpeg_tu...

CVE-2026-116095

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpeg_turbo::

来源摘录 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-10-25 发布HIGH

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to ...

CVE-2026-116094

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file applic

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-25 发布HIGH

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The...

CVE-2026-116062

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-25 发布HIGH

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipula...

CVE-2026-116061

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown co

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-25 发布HIGH

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread() calls...

CVE-2026-115825

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Conte

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-25 发布HIGH

Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The chunked body decoder keeps each chunk in memory until the...

CVE-2026-115824

Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-25 发布CRITICAL

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections. For a HEAD request Starman omits chunked fr...

CVE-2026-115823

Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive

来源摘录 · NVD

#cve #cwe-444

漏洞预警2026-10-25 发布HIGH

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before...

CVE-2026-115822

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked reque

来源摘录 · NVD

#cve #cwe-1333

漏洞预警2026-10-25 发布HIGH

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers. Content-Length and chunked request ...

CVE-2026-115817

Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout cove

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-25 发布MEDIUM

A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEngine.eval of the file JuelScriptEngine.java. Performing a ...

CVE-2026-116058

A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEng

来源摘录 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-10-25 发布MEDIUM

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the ...

CVE-2026-116057

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown function

来源摘录 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-25 发布MEDIUM

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of...

CVE-2026-116055

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-25 发布LOW

A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação. The manipulation leads to password h...

CVE-2026-116054

A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó

来源摘录 · NVD

#cve #cwe-326 #cwe-916

漏洞预警2026-10-25 发布HIGH

YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a Bazar entry-creation request is concatenated unesc...

CVE-2026-116211

YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche fiel

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-25 发布HIGH

YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts that lets malicious ActivityPub servers manipulate other act...

CVE-2026-116208

YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts tha

来源摘录 · NVD

#cve #cwe-862