#cwe-89

共收录 2526 条相关情报。

漏洞预警2026-09-23 发布INFO

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqli_query...

CVE-2026-95868

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the arg...

CVE-2026-95833

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-23 发布INFO

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src...

CVE-2026-95829

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function Paginatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-22 发布INFO

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP quer...

CVE-2026-61685

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build Type

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functionality ...

CVE-2026-95819

A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Af

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements ...

CVE-2026-18137

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL com

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution ...

CVE-2026-75682

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vul

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security...

CVE-2026-82011

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-82010

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-82009

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code ex...

CVE-2026-65128

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A succe

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows Blind SQL Injectio...

CVE-2026-12718

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Karel Electronic I

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. ...

CVE-2026-94117

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar –

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-22 发布INFO

A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component Op...

CVE-2026-94492

A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-22 发布INFO

A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/search_list.jsp. Executing a manipulation of the argument address can lead ...

CVE-2026-94491

A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/search_list.jsp. E

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-09-21 发布INFO

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via injecting crafted SQL statements.

CVE-2026-88402

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-21 发布HIGH

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function self_Tmp in the library Lib/Config/Controllers.php of the component Content Detai...

CVE-2026-94110

该漏洞影响 QCMS 内容管理系统 6.0.6 及更早版本，问题代码位于库文件 Lib/Config/Controllers.php 中的 self_Tmp 函数，触发点在「内容详情页」（Content Detail Page）组件。当该功

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery...

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar()

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:critical

安全公告2026-09-20 发布INFO

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla...

CVE-2026-88855

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Jooml

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-09-20 发布INFO

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin...

CVE-2026-94042

A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c.

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89