#cwe-89

共收录 2526 条相关情报。

← 返回所有主题
漏洞预警2026-09-16 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security revie...

CVE-2026-20361

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布HIGH

SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or modify ...

CVE-2026-8462

OpenMeter 是一款开源的用量计量与计费(metering/billing)平台,其计量事件数据后端存储在 ClickHouse 中,用户可通过 meters API 提交 meter 定义(包含 JSONPath 表达式)来描述如何

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

OpenMeter SQL Injection in ClickHouse-backed Meter Definitions

CVE-2026-8462

SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allo

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-16 发布INFO

The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.5.4 due to insufficient escap...

CVE-2026-16588

The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generate_index_pa...

CVE-2026-92221

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using direct st...

CVE-2026-32599

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database

历史摘要 · 未重新核验 · NVD

安全公告2026-09-15 发布INFO

Netmaker has a boolean‑based SQL Injection

CVE-2026-32599

# SQL Injection in Netmaker SQLite Database Backend ## Summary The `sqliteDeleteRecord` function in Netmaker's databas

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-15 发布INFO

Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated, blind...

CVE-2026-81567

Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py c...

CVE-2026-61667

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Concrete CMS before 9.5.3, the Document Library block stored the file-set identifiers submitted through fsID[] without validating them as integers, and when the block was con...

CVE-2026-81895

In Concrete CMS before 9.5.3, the Document Library block stored the file-set identifiers submitted through fsID[] withou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-image Caption field because the bundled Magnific Popup ligh...

CVE-2026-81894

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-im

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authent...

CVE-2024-58385

Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson....

CVE-2026-91848

A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /delete_faculty1.php. Such manipula...

CVE-2026-91004

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

The WP Directory Kit WordPress plugin through 1.5.7 does not sanitize and escape some widget settings before using them in a SQL statement, allowing authenticated users with acc...

CVE-2026-16593

The WP Directory Kit WordPress plugin through 1.5.7 does not sanitize and escape some widget settings before using them

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Publish Module. Such...

CVE-2026-90879

A vulnerability was identified in zyx0814 FilePress up to 3.0.1. This vulnerability affects unknown code of the file dzz

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /update_requirement_status.php....

CVE-2026-90877

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_requirement....

CVE-2026-90876

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of ...

CVE-2026-90855

A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.p...

CVE-2026-90854

A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element

历史摘要 · 未重新核验 · NVD