#cwe-78

共收录 1648 条相关情报。

← 返回所有主题

漏洞预警2026-06-12 发布INFO

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8...

CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-12 发布INFO

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8...

CVE-2026-48163

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-12 发布INFO

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8...

CVE-2026-44170

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-12 发布INFO

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8...

CVE-2026-44168

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-12 发布INFO

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS...

CVE-2026-11845

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, al

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-06-12 发布INFO

Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions...

CVE-2026-45172

Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3,

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-06-11 发布INFO

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing...

CVE-2026-42846

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, ClipBucket's Remote Play feature

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-11 发布INFO

Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user...

CVE-2026-45172

Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3,

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-06-11 发布INFO

KanaDojo contains a command injection vulnerability that allows an attacker with pull request...

CVE-2026-48547

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrar

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-06-11 发布INFO

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrary shell commands by inserting shell metacharacters into t...

CVE-2026-48547

KanaDojo contains a command injection vulnerability that allows an attacker with pull request access to execute arbitrar

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-11 发布INFO

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3....

CVE-2026-49261

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17,

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can...

CVE-2026-49219

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-78 #cwe-200 #cwe-863

漏洞预警2026-06-10 发布INFO

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, Dulwich's `ProcessMergeDriver` substitutes ...

CVE-2026-42563

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to v

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布INFO

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a roo...

CVE-2026-0273

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布INFO

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.1, on POSIX, escapeshellarg(‘/usr/bin/wkhtmltopdf’) return...

CVE-2026-46643

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布MEDIUM

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit ...

CVE-2026-24719

该漏洞为QNAP多个操作系统版本中的命令注入漏洞。攻击者需先获得管理员账户权限，然后利用此漏洞在受影响的设备上执行任意命令。厂商已在以下版本中修复：QTS 5.2.9.3492 build 20260507及之后版本，QuTS hero h

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布MEDIUM

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit ...

CVE-2026-22893

CVE-2026-22893 是一个影响多个 QNAP 操作系统版本的命令注入漏洞。该漏洞允许已获得管理员权限的远程攻击者通过特制的输入在受影响的设备上执行任意系统命令。QNAP 已在以下版本中修复此漏洞：QTS 5.2.9.3410 bu

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布HIGH

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit ...

CVE-2025-66279

QNAP 操作系统存在一个命令注入漏洞（CVE-2025-66279），影响多个版本。如果远程攻击者获得了管理员账户，就可以利用该漏洞执行任意命令，可能导致系统完全被控制。QNAP 已在以下版本中修复了此漏洞：QTS 5.2.9.3410

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-10 发布MEDIUM

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit ...

CVE-2025-66273

CVE-2025-66273 是一个影响多款 QNAP 操作系统版本的命令注入漏洞。根据官方描述，远程攻击者需要在获取管理员账户权限后，才能利用该漏洞执行任意命令。QNAP 已发布修复版本，包括 QTS 5.2.9.3410 build 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-06-09 发布INFO

Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter

CVE-2026-48030

### Summary An OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-78 #severity:critical