#cwe-89

共收录 2523 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/sys...

CVE-2026-108794

A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeec...

CVE-2026-108782

A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/j...

CVE-2026-108781

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/...

CVE-2026-108779

A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsControlle

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmIn...

CVE-2026-108778

A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.li

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiContr...

CVE-2026-108777

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvN...

CVE-2026-108775

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeC

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/Md...

CVE-2026-108774

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController....

CVE-2026-108773

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection')...

CVE-2026-59508

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. T

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-11 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0.

CVE-2026-59508

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.ja...

CVE-2026-108684

A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/task/openapi/openkqjAction.php of the...

CVE-2026-108571

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/Str...

CVE-2026-108569

A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Repl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injec...

CVE-2026-89305

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL qu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL ...

CVE-2026-89304

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL qu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform S...

CVE-2026-89302

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL ...

CVE-2026-89299

The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQ...

CVE-2026-89297

The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perfo...

CVE-2026-89287

The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQ

历史摘要 · 未重新核验 · NVD