Cyber Security Daily Radar

#cwe-863

共收录 2118 条相关情报。

← 返回所有主题
漏洞预警2026-07-15 发布INFO

SurrealDB is a scalable, distributed, collaborative, document-graph database for the realtime web. Prior to 3.1.0, Document::purge_edges in surrealdb/core/src/doc/delete.rs auto...

CVE-2026-49997

SurrealDB is a scalable, distributed, collaborative, document-graph database for the realtime web. Prior to 3.1.0, Docum

历史摘要 · 未重新核验 · NVD

#cve#cwe-285#cwe-863
安全公告2026-07-15 发布INFO

FastGPT: workflow runtime can execute another user's private HTTP toolset

CVE-2026-61643

FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an authenticated FastGPT user can

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-863
漏洞预警2026-07-15 发布INFO

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, File Browser can leave...

CVE-2026-62683

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · NVD

#cve#cwe-863
漏洞预警2026-07-15 发布INFO

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, an authenticated user with a standard operational role can trigger server-sid...

CVE-2026-55242

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, an authenticated use

历史摘要 · 未重新核验 · NVD

#cve#cwe-863#cwe-1336
安全公告2026-07-15 发布INFO

File Browser: Trailing-slash delete leaves a stale public share behind

CVE-2026-62683

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-863
安全公告2026-07-15 发布INFO

ERPNext: Server-Side Template Injection (SSTI) in Batch autonaming via Stock Settings.naming_series_prefix

CVE-2026-55242

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, an authenticated use

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-1336#cwe-863
漏洞预警2026-07-15 发布INFO

FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat...

CVE-2026-61644

FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/ge

历史摘要 · 未重新核验 · NVD

#cve#cwe-863
漏洞预警2026-07-15 发布INFO

Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, a Cloudreve WebDAV account rooted at a configured folder can send paths such as /dav/%2e%2e/outsi...

CVE-2026-54563

Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, a Cloudreve WebDAV account rooted at a c

历史摘要 · 未重新核验 · NVD

#cve#cwe-863
漏洞预警2026-07-15 发布INFO

Cloudreve is a self-hosted file management and sharing system. From 4.12.0 until 4.16.1, Cloudreve's OAuth access tokens are issued without the OAuth client_id claim, so the JWT...

CVE-2026-54560

Cloudreve is a self-hosted file management and sharing system. From 4.12.0 until 4.16.1, Cloudreve's OAuth access tokens

历史摘要 · 未重新核验 · NVD

#cve#cwe-863
安全公告2026-07-15 发布INFO

Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim

CVE-2026-54560

Cloudreve is a self-hosted file management and sharing system. From 4.12.0 until 4.16.1, Cloudreve's OAuth access tokens

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-863
安全公告2026-07-15 发布INFO

Cloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) — scoped DAV credential escapes its configured account root

CVE-2026-54563

Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, a Cloudreve WebDAV account rooted at a c

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-863
安全公告2026-07-15 发布INFO

FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup

CVE-2026-61644

FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/ge

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-863
漏洞预警2026-07-15 发布INFO

PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for subsequent calls with arbitrary arguments. Attackers ...

CVE-2026-60087

PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals

历史摘要 · 未重新核验 · NVD

#cve#cwe-863
漏洞预警2026-07-14 发布INFO

A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. Affected is an unknown function of the file /api/v1/users/ of the comp...

CVE-2026-15752

A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. Affected is a

历史摘要 · 未重新核验 · NVD

#cve#cwe-862#cwe-863
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Template instance is constructed and can r...

CVE-2026-49981

Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is c

历史摘要 · 未重新核验 · NVD

#cve#cwe-693#cwe-863
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension:...

CVE-2026-48808

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but

历史摘要 · 未重新核验 · NVD

#cve#cwe-693#cwe-863
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values passed to join and replace filters or operands evalua...

CVE-2026-48807

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable val

历史摘要 · 未重新核验 · NVD

#cve#cwe-693#cwe-863
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to strings, allowing PHP to invoke __toString() on a S...

CVE-2026-48806

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerc

历史摘要 · 未重新核验 · NVD

#cve#cwe-693#cwe-863
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coercion on a Stringable operand without consulting SecurityPolicy::che...

CVE-2026-47732

Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coercion on a

历史摘要 · 未重新核验 · NVD

#cve#cwe-863
漏洞预警2026-07-14 发布INFO

Twig is a template language for PHP. Prior to 3.26.0, the column filter passes object arrays to PHP array_column(), which reads public and magic properties without reaching Core...

CVE-2026-46635

Twig is a template language for PHP. Prior to 3.26.0, the column filter passes object arrays to PHP array_column(), whic

历史摘要 · 未重新核验 · NVD

#cve#cwe-863