#cwe-472

共收录 100 条相关情报。

← 返回所有主题
漏洞预警2026-07-30 发布MEDIUM

The Persian Elementor (المنتور فارسی) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a ...

CVE-2026-1982

CVE-2026-1982 影响 WordPress 插件 Persian Elementor(المنتور فارسی)所有版本(包括 2.8.1)。该插件在集成 ZarinPal 支付网关时,未对用户提交的 'amount' 参数进行

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric value...

CVE-2026-65052

Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows un

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not...

CVE-2026-56877

The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplie

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-13 发布INFO

The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM sessio...

CVE-2026-56877

The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplie

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed an unauthenticated attacker to control donation checkout m...

CVE-2026-59817

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

Ghost: Paid gift memberships obtainable at minimal cost via the donations feature

CVE-2026-59817

Ghost is a Node.js content management system. From 6.27.0 before 6.44.0, Ghost's public donation checkout flow allowed a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-02 发布INFO

Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...

CVE-2026-14430

Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code insid

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...

CVE-2026-14387

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sand

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who...

CVE-2026-14389

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the rende

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-02 发布INFO

Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote...

CVE-2026-14391

Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromis

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-01 发布INFO

Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-14430

Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code insid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive i...

CVE-2026-14391

Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a...

CVE-2026-14389

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the rende

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security se...

CVE-2026-14387

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sand

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pa...

CVE-2026-14069

Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium secu...

CVE-2026-13974

Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypass nav

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security ...

CVE-2026-13938

Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a...

CVE-2026-13841

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rende

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...

CVE-2026-13801

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape...

CVE-2026-13796

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD