#cwe-74

共收录 1605 条相关情报。

← 返回所有主题
漏洞预警2026-08-29 发布MEDIUM

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing...

CVE-2026-82424

CVE-2026-82424 是 PHPGurukul Student Information System 1.0 中被发现的一个安全弱点,涉及文件 /student_edit1.php 的未知功能。攻击者可以通过远程方式操纵参数 ID,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-29 发布MEDIUM

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argum...

CVE-2026-82422

CVE-2026-82422 影响 itsourcecode Sales and Inventory System 1.0。该漏洞位于 /pages/emp_del.php 文件中的未知函数,攻击者可对参数 ID 进行操纵,导致 SQL 注

历史摘要 · 未重新核验 · NVD

安全公告2026-08-29 发布INFO

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects...

CVE-2026-82421

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processin

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-29 发布MEDIUM

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of th...

CVE-2026-82421

该漏洞位于 itsourcecode Sales and Inventory System 1.0 的 /pages/emp_edit.php 文件中,攻击者可通过操纵参数 ID 触发 SQL 注入。该漏洞影响的是未知处理逻辑,CVSS 评

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation in all versions up ...

CVE-2026-16759

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch_instructions of the file malicious_mcp_server.py of the component...

CVE-2026-81835

A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch_instruct

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

aiosmtplib: STARTTLS response injection

CVE-2026-55558

## Impact When a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-27 发布INFO

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a...

CVE-2026-81834

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the com...

CVE-2026-81833

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to...

CVE-2026-81526

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. ...

CVE-2026-81523

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke...

CVE-2026-19092

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rend

历史摘要 · 未重新核验 · NVD

安全公告2026-08-26 发布INFO

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is...

CVE-2026-79912

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability...

CVE-2026-79845

A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

A vulnerability was found in SililaWijesinghe Food Ordering System up to...

CVE-2026-79804

A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affec

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-25 发布INFO

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipul...

CVE-2026-79912

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of the file /InventoryManagement/edit.php. The manipulation ...

CVE-2026-79845

A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is some unknown functionality of the fi...

CVE-2026-79804

A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. (Chromium security severi...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive infor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. (Chromium se...

CVE-2026-79087

Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system

历史摘要 · 未重新核验 · NVD