#cwe-74

共收录 1605 条相关情报。

← 返回所有主题
漏洞预警2026-07-12 发布INFO

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search E...

CVE-2026-15477

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /op

历史摘要 · 未重新核验 · NVD

安全公告2026-07-12 发布INFO

IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection

CVE-2026-15478

A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-12 发布INFO

Bahmni bahmnicore Search Endpoint sql additionalParams sql injection

CVE-2026-15477

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /op

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-10 发布INFO

prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

CVE-2026-54159

### Impact A PHP Object Injection vulnerability affects the PrestaShop module `ps_facetedsearch`. The module rebuilds

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-10 发布INFO

grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::__call builds PDO DSN strings by directly concatenating user-configurable YAML values from fi...

CVE-2026-58493

grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::__call builds PDO DSN strings by dir

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-10 发布INFO

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j...

CVE-2026-55615

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks...

CVE-2026-0284

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enabl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-09 发布INFO

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inj...

CVE-2026-0284

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enabl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the ar...

CVE-2026-15190

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

A weakness has been identified in code-projects Interview Management System 1.0. This...

CVE-2026-15137

A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects...

CVE-2026-15135

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-09 发布INFO

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected...

CVE-2026-15134

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-09 发布INFO

A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the file \inc\classes\View.php. This manipulation of ...

CVE-2026-15137

A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /edit_food_items.php. The manipulation of the argumen...

CVE-2026-15135

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/...

CVE-2026-15134

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.12.9, an MQTT client could include protocol control chara...

CVE-2026-58213

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .deskto...

CVE-2026-55404

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection

CVE-2026-58213

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.1 and 2.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output

CVE-2026-55404

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Na...

CVE-2026-15035

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm

历史摘要 · 未重新核验 · NVD