#CVE

共收录 70327 条相关情报。

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privilege...

CVE-2026-90531

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability t

来源摘录 · NVD

#cve #cwe-611

漏洞预警2026-10-13 发布HIGH

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter met...

CVE-2026-86016

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-83960

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布MEDIUM

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute...

CVE-2026-83958

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web...

CVE-2026-83662

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially ga...

CVE-2026-75732

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布HIGH

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

CVE-2026-70098

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority becau...

CVE-2026-63174

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invoking the us...

CVE-2026-63172

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-adminis

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulating the sor...

CVE-2026-63165

Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary...

CVE-2026-63163

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route th

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplyi...

CVE-2026-63162

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identi...

CVE-2026-63161

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack

来源摘录 · NVD

#cve #cwe-384

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the b...

CVE-2026-63160

Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbati

来源摘录 · NVD

#cve #cwe-522

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing th...

CVE-2026-63159

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthentic

来源摘录 · NVD

#cve #cwe-640

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authenticate as t...

CVE-2026-63158

Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing

来源摘录 · NVD

#cve #cwe-836

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-controlled ...

CVE-2026-63154

Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrat

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right records for...

CVE-2026-63153

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows a

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategoryFilter ...

CVE-2026-63152

Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated att

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布HIGH

Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated by Txt::de...

CVE-2026-63149

Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict te

来源摘录 · NVD

#cve #cwe-330