共收录 1614 条相关情报。
← 返回所有主题CVE-2026-11412
金和OA C6 的 /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx 文件中存在一个未知函数，其参数 queryID 未经过滤，导致 SQL 注入漏洞。攻击者可以远程发送特制请求，利用该漏洞在数据库上执行任
CVE-2026-11406
A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpncl
CVE-2026-11342
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown functi
CVE-2026-11339
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the fil
CVE-2026-11342
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown functi
CVE-2026-11339
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the fil
CVE-2026-11334
A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979
CVE-2026-10878
A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/f
CVE-2026-10877
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impact
CVE-2026-47644
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Micr
CVE-2026-10875
A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unk
CVE-2026-10874
A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown
CVE-2026-41237
Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` whi
CVE-2026-41234
Froxlor is open source server administration software. Prior to version 2.3.7, the `DomainZones.add` API endpoint does n
CVE-2026-44182
### Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabli
CVE-2026-41234
## Summary The `DomainZones.add` API endpoint does not sanitize newline characters in TXT record content. An authentica
CVE-2026-10729
An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists i
CVE-2026-10704
A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the func
CVE-2026-10704
CVE-2026-10704 是影响 SourceCodester Pizzafy E-Commerce System 1.0 的一个 SQL 注入漏洞。该漏洞位于管理控制面板的 /admin/admin_class_novo.php 文件
CVE-2026-10688
A vulnerability was determined in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The impacted elem