#cwe-74

共收录 1614 条相关情报。

← 返回所有主题
漏洞预警2026-06-15 发布INFO

A vulnerability was identified in Grit42 Grit up to 0.11.0. This issue affects the function Grit::Assays::DataTableEntity of the file modules/assays/backend/app/models/grit/assa...

CVE-2026-12206

A vulnerability was identified in Grit42 Grit up to 0.11.0. This issue affects the function Grit::Assays::DataTableEntit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file /cgi-bin/luci/api/diagnose of the component JSON-RPC Diag...

CVE-2026-12197

A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-14 发布INFO

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules/core/backend/app/controllers/concerns/grit/cor...

CVE-2026-12188

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-14 发布INFO

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/one_click_upgrade of...

CVE-2026-12187

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-14 发布INFO

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Se...

CVE-2026-12186

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library

历史摘要 · 未重新核验 · NVD

安全公告2026-06-13 发布INFO

A content injection vulnerability was found in the ABRT post-create event handler scripts in...

CVE-2026-54231

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-13 发布MEDIUM

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the...

CVE-2026-54231

该漏洞存在于 libreport 的 ABRT (自动错误报告工具) 后创建事件处理脚本中。当程序崩溃时,ABRT 会触发事件脚本,该脚本查询 systemd 日志以获取与崩溃进程匹配的日志条目,并将结果写入 dump 目录的特定文件中。然

历史摘要 · 未重新核验 · NVD

安全公告2026-06-13 发布INFO

A weakness has been identified in CodeAstro Human Resource Management System 1.0. This...

CVE-2026-12131

A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the functio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-12 发布INFO

A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function Invoice of the file \application\controllers\Payroll.ph...

CVE-2026-12131

A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the functio

历史摘要 · 未重新核验 · NVD

安全公告2026-06-11 发布INFO

GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection

CVE-2025-27511

## Summary Administrator can perform JNDI attack through specially crafted DB2 jdbc url leading to Remote Code Executio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-11 发布INFO

Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime...

CVE-2026-47162

Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.53.0, an authenticated user could supply specially craf...

CVE-2026-46546

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

历史摘要 · 未重新核验 · NVD

安全公告2026-06-09 发布INFO

SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

CVE-2026-47767

### Description CVE-2024-50340 (GHSA-x8vp-gf4q-mw5j) addressed an issue where, with `register_argc_argv=On`, a crafted

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-09 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a netw...

CVE-2026-47634

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose infor...

CVE-2026-42835

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams fo

历史摘要 · 未重新核验 · NVD

安全公告2026-06-09 发布INFO

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7...

CVE-2026-8795

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-09 发布INFO

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in client_info.json inside a ...

CVE-2026-8795

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of the file /attendance-php/Admin/createClassArms.php. This...

CVE-2026-11585

A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability was found in CodeAstro Student Attendance Management System 1.0. This impacts an unknown function of the file /attendance-php/Admin/createClass.php?action=edit. ...

CVE-2026-11584

A vulnerability was found in CodeAstro Student Attendance Management System 1.0. This impacts an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function of the file /attendance-php/Admin/createClass.php. The man...

CVE-2026-11583

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function o

历史摘要 · 未重新核验 · NVD