#cwe-77

共收录 708 条相关情报。

← 返回所有主题
漏洞预警2026-05-21 发布INFO

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code exec...

CVE-2026-2740

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus bef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Insufficient Validation of Names During AXFR

CVE-2026-42000

Insufficient Validation of Names During AXFR

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

A potential security vulnerability has been identified in the HP Linux Imaging and Printing...

CVE-2026-8632

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vul

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbi...

CVE-2026-8632

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high...

CVE-2026-35070

Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as ...

CVE-2026-45585

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made...

CVE-2026-45585

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.

CVE-2025-57282

ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.

CVE-2025-57282

ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Pe...

CVE-2026-8777

A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp of the component POST Request Handler. The manipulation o...

CVE-2026-8774

A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the...

CVE-2026-8767

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/pre

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-17 发布INFO

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name In...

CVE-2026-8767

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/pre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derive...

CVE-2026-46508

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands....

CVE-2026-39054

Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a she

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a shell process and writes attacker-controlled command strings...

CVE-2026-39054

Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a she

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can modify configuration objects resulti...

CVE-2026-41953

A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource Ad

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration...

CVE-2026-40698

A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with the Res...

CVE-2026-40061

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) comm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation ...

CVE-2026-44871

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS

历史摘要 · 未重新核验 · NVD