#cwe-470

共收录 103 条相关情报。

漏洞预警2026-09-16 发布INFO

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field into Python callables via `import_strin...

CVE-2026-86792

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connectio

历史摘要 · 未重新核验 · NVD

#cve #cwe-470

安全公告2026-09-16 发布INFO

Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration

CVE-2026-86792

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connectio

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-470

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, the pre-authentication /authservice PLL endpoint accepts a CustomCallback XML element whose cl...

CVE-2026-62379

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, the pre-authentication /authservice P

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-470

漏洞预警2026-09-10 发布INFO

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.

CVE-2026-79987

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating

历史摘要 · 未重新核验 · NVD

#cve #cwe-470

安全公告2026-09-10 发布INFO

Low-privilege RCE through element-search eager loading

CVE-2026-79987

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-470

漏洞预警2026-09-03 发布INFO

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configur...

CVE-2026-58400

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the S

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-470

安全公告2026-09-03 发布INFO

GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter

CVE-2026-58400

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the S

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-470 #cwe-94

漏洞预警2026-09-01 发布INFO

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deseriali...

CVE-2026-19032

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI sch

历史摘要 · 未重新核验 · NVD

#cve #cwe-470 #cwe-610

安全公告2026-09-01 发布INFO

jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path

CVE-2026-19032

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI sch

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-470 #cwe-610

漏洞预警2026-08-28 发布INFO

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/{instance} into YAML through VarSt...

CVE-2026-55559

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances an

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-470 #cwe-1336

漏洞预警2026-08-28 发布INFO

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes ba...

CVE-2026-82078

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG

历史摘要 · 未重新核验 · NVD

#cve #cwe-470

安全公告2026-08-26 发布INFO

cakephp/debug_kit: MailPreview contains unsafe reflection

CVE-2026-54614

### Impact The `MailPreview` feature of debugkit is vulnerable to arbitrary constructor execution. For an application t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-470 #severity:medium

漏洞预警2026-08-25 发布INFO

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class in vocos/pretrained.py takes the class_path value from t...

CVE-2026-79784

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class

历史摘要 · 未重新核验 · NVD

#cve #cwe-470

漏洞预警2026-08-21 发布INFO

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves and calls Python objects selected by configuration throug...

CVE-2026-68508

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-470

安全公告2026-08-21 发布INFO

Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

CVE-2026-68508

## Summary `hydra.utils.instantiate()` resolves and calls Python objects from config. If an application passes untruste

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-94 #cwe-470 #severity:high

安全公告2026-08-18 发布INFO

kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

CVE-2026-55107

### Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rubygems #cwe-94 #cwe-470 #severity:critical

漏洞预警2026-08-18 发布INFO

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDesc...

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

历史摘要 · 未重新核验 · NVD

#cve #cwe-470

安全公告2026-08-14 发布INFO

mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"

CVE-2026-55153

### Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI `ObjectFactory` implementation (`com.mchange.v2.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-470 #severity:high

漏洞预警2026-08-13 发布INFO

Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that v...

CVE-2026-13051

Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch an

历史摘要 · 未重新核验 · NVD

#cve #cwe-470 #cwe-1336

漏洞预警2026-08-13 发布INFO

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text b...

CVE-2022-4993

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion beca

历史摘要 · 未重新核验 · NVD

#cve #cwe-470 #cwe-1336