#cwe-74

共收录 1614 条相关情报。

← 返回所有主题
漏洞预警2026-05-21 发布INFO

The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2....

CVE-2026-6279

The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP F

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could...

CVE-2026-20199

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, re

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying opera...

CVE-2026-20199

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, re

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this...

CVE-2026-8785

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the func

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file update_info.php of t...

CVE-2026-8785

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the func

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp...

CVE-2026-8774

A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function...

CVE-2026-8777

A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Pe...

CVE-2026-8777

A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp of the component POST Request Handler. The manipulation o...

CVE-2026-8774

A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function...

CVE-2026-8771

A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function list of the file litem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown...

CVE-2026-8772

A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this...

CVE-2026-8773

A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the fun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the function backup/load of the file litemall-db/src/main/java/o...

CVE-2026-8773

A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql inje...

CVE-2026-8772

A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function list of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/web/W...

CVE-2026-8771

A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function list of the file litem

历史摘要 · 未重新核验 · NVD

安全公告2026-05-17 发布INFO

A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the...

CVE-2026-8753

A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the function parseVideoInf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-17 发布INFO

A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils...

CVE-2026-8724

A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-17 发布MEDIUM

A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the component Data Dashboard. The...

CVE-2026-8724

Dataease 2.10.20 版本的数据仪表盘组件中存在 SQL 注入漏洞,该漏洞位于 SqlparserUtils.java 文件的 SqlparserUtils.transFilter 函数中。攻击者可以通过远程方式利用该漏洞,且利

历史摘要 · 未重新核验 · NVD

安全公告2026-05-14 发布INFO

Marten has an injection vulnerability in its full-text search regConfig parameter

CVE-2026-45288

## Summary Marten's full-text search APIs interpolated the user-supplied `regConfig` parameter directly into the genera

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-14 发布INFO

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.9, 7.8.9, 8.22.1, and 9.1.6, a vulnerability allows bypassing Mongoose’...

CVE-2026-42334

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.9, 7.8.9, 8.22

历史摘要 · 未重新核验 · NVD