#cwe-88

共收录 215 条相关情报。

漏洞预警2026-10-05 发布INFO

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into its options, and ho...

CVE-2026-12171

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-88 #cwe-94 #cwe-829 #cwe-918

安全公告2026-10-05 发布INFO

auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF

CVE-2026-12171

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the aut

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-829 #cwe-88 #cwe-918 #cwe-94

漏洞预警2026-10-02 发布INFO

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacke...

CVE-2026-91784

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passe

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

安全公告2026-10-02 发布INFO

Argument Injection leading to arbitrary process termination in gotop

CVE-2026-91784

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passe

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-88

漏洞预警2026-10-01 发布INFO

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or...

CVE-2026-97662

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-73 #cwe-88

漏洞预警2026-10-01 发布INFO

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated...

CVE-2026-103505

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-drive

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

安全公告2026-10-01 发布INFO

AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

CVE-2026-103505

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-drive

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-88

安全公告2026-10-01 发布INFO

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

CVE-2026-102904

JupyterLab's PyPI extension manager runs `python -m pip uninstall` with the extension name taken from the request body.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-88 #cwe-209 #cwe-918 #severity:medium

漏洞预警2026-09-29 发布INFO

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

历史摘要 · 未重新核验 · NVD

#cve #cwe-88 #cwe-209 #cwe-918

漏洞预警2026-09-29 发布INFO

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUn...

CVE-2026-102827

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operat

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-88

漏洞预警2026-09-29 发布INFO

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an argument-injection vulnerability in its...

CVE-2026-86035

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 202

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-88

安全公告2026-09-29 发布INFO

Weblate: Mercurial argument injection via repository filenames allows authenticated command execution

CVE-2026-86035

Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 202

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-78 #cwe-88

安全公告2026-09-26 发布INFO

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting:...

CVE-2026-100714

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings h

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-88 #severity:critical

漏洞预警2026-09-26 发布INFO

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings hardened in GHSA-33mp, the field has no string_regexp or r...

CVE-2026-100714

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings h

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

安全公告2026-09-26 发布INFO

Froxlor before 2.3.12 Command Injection via letsencryptchallengepath

CVE-2026-100714

Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings h

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-88

安全公告2026-09-25 发布INFO

CliInvoke: Argument Injection in Extensibility Runner Factory

CVE-2026-100369

### Impact An argument-injection vulnerability exists in the `CliInvoke` package's runner factory: `RunnerProcessFactory

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-88 #severity:high

安全公告2026-09-23 发布INFO

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated...

CVE-2026-87900

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-88 #severity:critical

安全公告2026-09-23 发布INFO

An argument-injection flaw was found in the Ansible Automation Platform automation-controller...

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-88 #severity:medium

漏洞预警2026-09-23 发布INFO

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

CVE-2026-87900

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

漏洞预警2026-09-23 发布INFO

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplie...

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-88