#cwe-791

共收录 21 条相关情报。

← 返回所有主题
漏洞预警2026-10-11 发布INFO

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs o...

CVE-2026-108570

A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/c...

CVE-2026-103540

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the funct

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

CVE-2026-103540

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the funct

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-30 发布INFO

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this...

CVE-2026-102771

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailC

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-29 发布INFO

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/cont...

CVE-2026-102771

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailC

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

A vulnerability in the N-central internal API access control filter allows unauthorised access to...

CVE-2026-86206

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-05 发布INFO

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

CVE-2026-86206

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is

历史摘要 · 未重新核验 · NVD

安全公告2026-08-23 发布INFO

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update...

CVE-2026-78140

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/ja

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-23 发布INFO

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateContro...

CVE-2026-78140

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/ja

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布MEDIUM

A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.java of the compone...

CVE-2026-75979

CVE-2026-75979 是 xianrendzw EasyReport 组件中发现的一个安全漏洞,影响版本至 2.0.17.0522_Beta。漏洞位于 DesignerController.java 文件的 execSqlText/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-16 发布INFO

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentControlle...

CVE-2026-19929

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails

历史摘要 · 未重新核验 · NVD

安全公告2026-08-16 发布INFO

OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine

CVE-2026-19929

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-03 发布INFO

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the...

CVE-2026-18632

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/code_executor/jinja2/jinja2_tran...

CVE-2026-18632

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of

历史摘要 · 未重新核验 · NVD

安全公告2026-06-24 发布INFO

A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies...

CVE-2026-11998

A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-24 发布INFO

A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the con...

CVE-2026-11998

A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via ema...

CVE-2026-48208

An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-25 发布INFO

A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. Impacted is the function GroovyClassLoader.parseClass of the component Message Template Handler. Such manipulat...

CVE-2026-9498

A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. Impacted is the function GroovyClassLoader.parseClass

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.3.0, every IPv6 category bypasses is_url_safe. This vulnerability...

CVE-2026-44232

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.3.0, eve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft pac...

CVE-2026-7164

Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a

历史摘要 · 未重新核验 · NVD