#cwe-20

共收录 1723 条相关情报。

← 返回所有主题
漏洞预警2026-08-27 发布INFO

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated ...

CVE-2026-57499

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

silverstripe/userforms vulnerable to remote code execution via userforms email subject

CVE-2026-54721

### Impact The userform email subject field in the CMS is vulnerable to a specially crafted payload being used to run ar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email

CVE-2026-81707

openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inj

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypass

CVE-2026-81686

openssl_encrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set m

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-27 发布INFO

Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input

CVE-2026-81827

Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Email(email). That doe

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-27 发布INFO

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals...

CVE-2026-81662

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. Whil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint perfor...

CVE-2026-59354

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registratio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, or json_...

CVE-2026-47880

A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String

历史摘要 · 未重新核验 · NVD

安全公告2026-08-26 发布INFO

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990...

CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-25 发布INFO

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.

CVE-2026-18261

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*.

CVE-2026-18260

Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.

CVE-2026-16643

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

CVE-2026-16642

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.

CVE-2026-16641

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.

CVE-2026-15088

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.5...

CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects

历史摘要 · 未重新核验 · NVD

安全公告2026-08-25 发布INFO

Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65...

CVE-2026-79288

Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote...

CVE-2026-79272

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...

CVE-2026-79251

Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially by

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote...

CVE-2026-79255

Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · GitHub Advisory