#cwe-89

共收录 2523 条相关情报。

漏洞预警2026-10-16 发布MEDIUM

PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules. From 5.0.0 until 9.3.15, the /api/statistic/analysis/fie...

CVE-2026-62362

PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules.

来源摘录 · NVD

#cve #cwe-89

安全公告2026-10-16 发布INFO

Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL...

CVE-2026-111389

Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-10-15 发布INFO

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1...

CVE-2026-110840

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL nod

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-10-14 发布CRITICAL

e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username dire...

CVE-2026-55572

e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authenticati

来源摘录 · NVD

#cve #cwe-89

安全公告2026-10-14 发布INFO

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via...

CVE-2026-97668

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:critical

安全公告2026-10-14 发布INFO

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL...

CVE-2026-102251

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' pa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

漏洞预警2026-10-13 发布HIGH

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security fea...

CVE-2026-110083

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布INFO

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, Forti...

CVE-2026-23707

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布INFO

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, Forti...

CVE-2026-23706

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布HIGH

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, Forti...

CVE-2026-23705

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布INFO

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail...

CVE-2025-57739

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布INFO

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, Forti...

CVE-2025-46773

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布INFO

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database e...

CVE-2026-55823

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a coun

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipu...

CVE-2026-109620

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. ...

CVE-2026-109607

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/a

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component ...

CVE-2026-109606

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

安全公告2026-10-13 发布INFO

Frappe: Possibility of SQL injection in reportview

CVE-2026-55823

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a coun

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-10-13 发布INFO

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functiona...

CVE-2026-109523

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin...

CVE-2026-109522

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-13 发布INFO

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file change...

CVE-2026-109521

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89