#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directo...

CVE-2026-108938

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation...

CVE-2026-108937

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads t...

CVE-2026-108936

A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/fo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Pag...

CVE-2026-108935

A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archiv...

CVE-2026-102627

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowing arbitra...

CVE-2025-71432

Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to mis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LD...

CVE-2025-71431

Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard page because user names are rendered without proper neutra...

CVE-2025-71430

Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布MEDIUM

Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. Remot...

CVE-2024-58391

Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printvie

来源摘录 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Websit...

CVE-2024-58390

Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certai

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to cre...

CVE-2023-54412

Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. A...

CVE-2023-54411

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documents by exploiting a missing permission check. Attackers ca...

CVE-2023-54410

Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text function weakly sanitizes user input. Authenticated attackers c...

CVE-2023-54409

Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-supplied content rendered in pages. Attackers can submit c...

CVE-2023-54408

Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in traceba...

CVE-2023-54407

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one ser...

CVE-2023-54406

Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

CVE-2026-92876

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the h...

CVE-2026-90921

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

CVE-2026-90920

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control o

历史摘要 · 未重新核验 · NVD