#cwe-20

共收录 1721 条相关情报。

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could explo...

CVE-2026-75686

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-22 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-75638

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-22 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-75634

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-22 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabi...

CVE-2026-75633

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-22 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-19480

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-09-22 发布INFO

mppx: Gas Draining with access list

CVE-2026-63628

mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-payer cosigning path in src/tempo/

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20

安全公告2026-09-22 发布INFO

mppx: Gas Draining with padding

CVE-2026-63627

mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, FeePayerPolicy in src/tempo/internal/fee-p

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-pr...

CVE-2026-82008

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary co

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-pr...

CVE-2026-82003

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary co

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the f...

CVE-2026-77605

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-706

安全公告2026-09-22 发布INFO

Notepad++ “Run by system” executes .txt.cmd when user selected .txt (target confusion → command execution)

CVE-2026-77605

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20 #cwe-706

漏洞预警2026-09-22 发布INFO

In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem probes (file_exists, MIME type detection, EXIF reading) befo...

CVE-2026-95703

In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200

安全公告2026-09-22 发布INFO

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

CVE-2026-95703

In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem pro

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20 #cwe-200

漏洞预警2026-09-22 发布INFO

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build() library contains a logic error in its readFile guard c...

CVE-2026-95679

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-918

漏洞预警2026-09-22 发布INFO

In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified modu...

CVE-2026-95674

In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

安全公告2026-09-22 发布INFO

MISP Unauthenticated Blind SSRF via XML Body Processing

CVE-2026-95679

MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20 #cwe-918

安全公告2026-09-22 发布INFO

MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation

CVE-2026-95674

In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20

漏洞预警2026-09-22 发布INFO

MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from th...

CVE-2026-95659

MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-79 #cwe-116

安全公告2026-09-22 发布INFO

MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread

CVE-2026-95659

MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. T

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-116 #cwe-20 #cwe-79

漏洞预警2026-09-22 发布INFO

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Succe...

CVE-2026-93952

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile

历史摘要 · 未重新核验 · NVD

#cve #cwe-20