#cwe-693

共收录 445 条相关情报。

漏洞预警2026-10-12 发布INFO

Nginx UI is a web user interface for the Nginx web server. From 2.0.0-rc.6 until 2.4.1, the MCP tool nginx_config_add writes nginx configuration files to disk and triggers an ng...

CVE-2026-84318

Nginx UI is a web user interface for the Nginx web server. From 2.0.0-rc.6 until 2.4.1, the MCP tool nginx_config_add wr

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-12 发布INFO

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx d...

CVE-2026-84317

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfig

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-693

漏洞预警2026-10-12 发布INFO

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, the multipart processor in internal/bodyprocessors/multipart.go tre...

CVE-2026-41508

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, the multip

历史摘要 · 未重新核验 · NVD

#cve #cwe-693 #cwe-755

漏洞预警2026-10-12 发布INFO

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecArgumentsLimit in internal...

CVE-2026-41510

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza sil

历史摘要 · 未重新核验 · NVD

#cve #cwe-693 #cwe-770

漏洞预警2026-10-12 发布INFO

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDecode transformation in internal/transformations/js_decode...

CVE-2026-104774

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDe

历史摘要 · 未重新核验 · NVD

#cve #cwe-172 #cwe-193 #cwe-693

漏洞预警2026-10-12 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the default Thread...

CVE-2026-107226

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-384 #cwe-693

漏洞预警2026-10-12 发布INFO

Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addres...

CVE-2026-109364

Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-12 发布INFO

Protection Mechanism Failure vulnerability in hexpm hex allows the owner of a package, or an attacker who has taken over the owner's account, to get a newly published release pa...

CVE-2026-105668

Protection Mechanism Failure vulnerability in hexpm hex allows the owner of a package, or an attacker who has taken over

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

安全公告2026-10-12 发布INFO

Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying

CVE-2026-109364

Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-693

安全公告2026-10-08 发布INFO

PraisonAI: Shell command allowlist bypass via find -exec built-in action

CVE-2026-61434

### Summary The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2m

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-78 #cwe-693 #severity:high

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to ...

CVE-2026-16916

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

安全公告2026-10-07 发布INFO

Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in...

CVE-2026-76283

Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-693

安全公告2026-10-07 发布INFO

PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

CVE-2026-61439

### Summary Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detecti

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-116 #cwe-693 #cwe-1287 #severity:high

安全公告2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute...

CVE-2026-97673

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-693 #severity:high

安全公告2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute...

CVE-2026-97678

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-693 #severity:high

漏洞预警2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.

CVE-2026-97678

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-10-07 发布INFO

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.

CVE-2026-97673

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

安全公告2026-10-06 发布INFO

Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

CVE-2026-41510

## Root Cause File: `internal/corazawaf/transaction.go`, lines 770–808 (since commit 2fd87b89, PR #812, 2023-06-14) ``

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-693 #cwe-770 #severity:high

安全公告2026-10-06 发布INFO

Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

CVE-2026-41508

## Root Cause File: `internal/bodyprocessors/multipart.go` (since commit `3347961b`, PR #1453 *"feat: ignore unexpected

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-20 #cwe-693 #cwe-755 #severity:medium

漏洞预警2026-10-06 发布INFO

Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related execut...

CVE-2026-106439

Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra store

历史摘要 · 未重新核验 · NVD

#cve #cwe-470 #cwe-693