#cwe-20

共收录 1723 条相关情报。

← 返回所有主题
漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths (e.g...

CVE-2026-54206

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set to network locations using ...

CVE-2026-54205

Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname”

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths (e.g., “\\Server\Sha...

CVE-2026-54204

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality (//ServerClient_celin...

CVE-2026-54199

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the applic

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed...

CVE-2026-19177

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0...

CVE-2026-19143

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a loca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0...

CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109...

CVE-2026-19164

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-06 发布INFO

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perfo...

CVE-2026-19177

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted H...

CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM...

CVE-2026-19164

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site ...

CVE-2026-19153

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a ...

CVE-2026-19143

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking, and relies on clie...

CVE-2026-15149

The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total ar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The Easy Appointments WordPress plugin through 3.12.26 does not correctly validate shortcode input in one of its block-rendering actions, checking only the first tag of the supp...

CVE-2026-14225

The Easy Appointments WordPress plugin through 3.12.26 does not correctly validate shortcode input in one of its block-r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This allows authenticated users to potentia...

CVE-2024-6541

The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values (SV) frame processing. A specially crafted SV frame can cause the a...

CVE-2026-16316

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values (SV) frame

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a n...

CVE-2026-57817

The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators....

CVE-2025-13909

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OT

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user ...

CVE-2024-10302

The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allo

历史摘要 · 未重新核验 · NVD