#cwe-74

共收录 1614 条相关情报。

← 返回所有主题
漏洞预警2026-05-13 发布INFO

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer escapes style attribute object values for HTML but not f...

CVE-2026-44458

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handling of JSX element tag names in hono/jsx allowed unvalidate...

CVE-2026-44455

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handlin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate ...

CVE-2026-42838

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Ch

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass ...

CVE-2026-41109

Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing ...

CVE-2026-33833

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Lear

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function...

CVE-2026-8346

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by...

CVE-2026-8345

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the funct

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this...

CVE-2026-8344

A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布INFO

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ip_address results in com...

CVE-2026-8346

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the function sub_445E7C of the file /goform/singlePortForward. Suc...

CVE-2026-8345

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the funct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function sub_445E7C of the file /goform/formDMZ.cgi. This manipula...

CVE-2026-8344

A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to be inject...

CVE-2025-8154

In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient valida

历史摘要 · 未重新核验 · NVD

安全公告2026-05-10 发布INFO

A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an...

CVE-2026-8231

A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-10 发布INFO

A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the file /deleteorder.php. The manipulation of the argument ...

CVE-2026-8231

A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the

历史摘要 · 未重新核验 · NVD

安全公告2026-05-10 发布INFO

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the...

CVE-2026-8211

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file or

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-09 发布MEDIUM

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file org/codelibs/fess/app/web/admin/design/AdminDesignAction.ja...

CVE-2026-8211

CVE-2026-8211 是影响 codelibs Fess(一个开源企业搜索服务器)至 15.5.1 版本的高危漏洞。漏洞位于 JSP 文件处理组件中的 `org/codelibs/fess/app/web/admin/design/A

历史摘要 · 未重新核验 · NVD

安全公告2026-05-09 发布INFO

A security vulnerability has been detected in aandrew-me tgpt up to 2.11.1 on Linux/macOS....

CVE-2026-8210

A security vulnerability has been detected in aandrew-me tgpt up to 2.11.1 on Linux/macOS. Affected by this vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-09 发布MEDIUM

A security vulnerability has been detected in aandrew-me tgpt up to 2.11.1 on Linux/macOS. Affected by this vulnerability is the function helper.Update of the file helper.go of ...

CVE-2026-8210

CVE-2026-8210 影响 aandrew-me 开发的 tgpt 工具(版本 <= 2.11.1),主要运行在 Linux 和 macOS 系统上。该漏洞位于 helper.go 文件中的 helper.Update 函数(即 Up

历史摘要 · 未重新核验 · NVD

安全公告2026-05-09 发布INFO

Hono has CSS Declaration Injection via Style Object Values in JSX SSR

CVE-2026-44458

### Summary The JSX renderer escapes `style` attribute object values for HTML but not for CSS. Untrusted input in a `st

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-08 发布INFO

i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno. Prior to version 9.0.2, i18next-locize-backend inter...

CVE-2026-41885

i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for D

历史摘要 · 未重新核验 · NVD