#cwe-74

共收录 1600 条相关情报。

← 返回所有主题
漏洞预警2026-10-10 发布INFO

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 T...

CVE-2026-102291

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcod

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of their moderati...

CVE-2026-84220

The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection again...

CVE-2026-102158

Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to ...

CVE-2026-102156

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view_product.php. Performin...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown func

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

i18next-http-backend incomplete URL validation permits SSRF

CVE-2026-105800

There is an SSRF vulnerability when using `i18next-http-backend`. A colon in an attacker-controlled language value can m

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search_cla...

CVE-2026-105921

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace va...

CVE-2026-105800

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Pri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file...

CVE-2026-105920

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql_query of the file...

CVE-2026-105919

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql_error of the file login....

CVE-2026-105918

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in...

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is ...

CVE-2026-105776

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to...

CVE-2026-105472

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of th...

CVE-2026-105472

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to...

CVE-2026-105471

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to...

CVE-2026-105469

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to...

CVE-2026-105470

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to...

CVE-2026-105468

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoi...

CVE-2026-82989

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticat

历史摘要 · 未重新核验 · NVD