#cwe-74

共收录 1600 条相关情报。

← 返回所有主题
漏洞预警2026-09-24 发布MEDIUM

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.adm_server.php?r=adm/usersel...

CVE-2026-96777

CVE-2026-96777 是 Forma LMS 4.1.43 及更早版本中存在的一处 SQL 注入漏洞。Forma LMS 是一套面向企业培训与在线教育场景的学习管理系统,其后台提供“多用户选择器”(Multi-User-Select

历史摘要 · 未重新核验 · NVD

安全公告2026-09-24 发布INFO

A vulnerability has been found in pmTicket Project-Management-Software up to...

CVE-2026-96751

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. T

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the...

CVE-2026-96604

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the...

CVE-2026-96602

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-24 发布INFO

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/add_pr...

CVE-2026-96751

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the component Search M...

CVE-2026-96604

A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulatio...

CVE-2026-96602

A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of t...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task (administrato...

CVE-2026-90902

Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extensio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The checkout.searchGuestUser endpoint a...

CVE-2026-90901

Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extens

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation o...

CVE-2026-96514

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper neutralization of special elements in a...

CVE-2026-19179

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database querie

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI agent server (api.vectordb....

CVE-2026-18875

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Ninja Tables WordPress plugin before 5.2.17 does not restrict shortcode expansion to administrator-authored table rows which, in a non-default configuration, allows unauthen...

CVE-2026-86612

The Ninja Tables WordPress plugin before 5.2.17 does not restrict shortcode expansion to administrator-authored table ro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The GTranslate WordPress plugin before 5.0.1 does not remove shortcodes from the content of outgoing emails before expanding them which, in a non-default configuration, allows u...

CVE-2026-86604

The GTranslate WordPress plugin before 5.0.1 does not remove shortcodes from the content of outgoing emails before expan

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content before expanding it while building a page's structured metadata, allowing unau...

CVE-2026-86601

The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content before expanding it w

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown...

CVE-2026-95929

A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This...

CVE-2026-95927

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The...

CVE-2026-95926

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unkno

历史摘要 · 未重新核验 · GitHub Advisory