#cwe-78

共收录 1648 条相关情报。

漏洞预警2026-07-06 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the buildHelperImage method in app/Livewire/Settings...

CVE-2026-42148

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-06 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, there is an authenticated command injection vulnerab...

CVE-2026-34599

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-06 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, LocalFileVolume::saveStorageOnServer builds shell co...

CVE-2026-34153

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-06 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.451 through 4.0.0-beta.470, database backup handling for Mong...

CVE-2026-34049

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.451

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-06 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, an authenticated remote command injection vulnerabil...

CVE-2026-34038

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-07-06 发布INFO

Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command

CVE-2026-55426

### Summary When a check plugin places user provided input inside a command which is passed to `shell_exec`, an attacker

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-78 #severity:high

安全公告2026-07-06 发布INFO

Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

CVE-2026-55427

### Summary `coder config-ssh` wrote server-supplied SSH settings (`HostnameSuffix`, `SSHConfigOptions`) into the user'

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-74 #cwe-78 #severity:high

漏洞预警2026-07-06 发布INFO

Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without e...

CVE-2026-55798

Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-06 发布INFO

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-...

CVE-2026-14802

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProce

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-07-04 发布INFO

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users...

CVE-2026-12195

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-07-04 发布INFO

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user parameter when deleti...

CVE-2026-12195

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary c

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-07-03 发布INFO