#cwe-913

共收录 35 条相关情报。

漏洞预警2026-09-02 发布INFO

A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update of the file app/home/controller/Index.php of the compone...

CVE-2026-84430

A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update

历史摘要 · 未重新核验 · NVD

#cve #cwe-913 #cwe-915

漏洞预警2026-08-27 发布INFO

Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compil...

CVE-2026-59283

Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-08-21 发布LOW

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM (`internal/cluster/raft/fsm.go:applyRegisterFile`) accepts att...

CVE-2026-48105

CVE-2026-48105 影响 Arc Enterprise（Arc 是一个开源的、SQL 原生时序数据库，用于遥测数据）。在版本 26.06.1 之前，Arc Enterprise 的 Raft 状态机（FSM）在 `internal

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-345 #cwe-913

漏洞预警2026-08-20 发布INFO

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitra...

CVE-2026-76023

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-08-19 发布INFO

A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource (CR) editor, to manipulate Search CR fields such as image...

CVE-2026-71470

A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-08-17 发布INFO

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around da...

CVE-2026-47698

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stac

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

安全公告2026-08-17 发布INFO

vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

CVE-2026-47698

### Summary VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape fro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-913 #severity:critical

漏洞预警2026-08-11 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintend...

CVE-2026-73226

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm al

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-06-16 发布INFO

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlus...

CVE-2026-48775

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async,

历史摘要 · 未重新核验 · NVD

#cve #cwe-502 #cwe-913

漏洞预警2026-06-12 发布INFO

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code execution in the host process when untrusted c...

CVE-2026-47210

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbi

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-06-12 发布INFO

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape fr...

CVE-2026-47208

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-06-12 发布INFO

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the ...

CVE-2026-47137

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903)

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-06-12 发布INFO

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.lookupGetter, Buffer, "proto"), Buffer.call.call({}.__lookupSette...

CVE-2026-47131

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__

历史摘要 · 未重新核验 · NVD

#cve #cwe-913

漏洞预警2026-05-08 发布INFO

PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by def...

CVE-2026-44336

PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (prais

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-22 #cwe-94 #cwe-829 #cwe-913

漏洞预警2026-04-29 发布INFO

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile ty...

CVE-2026-7381

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middle

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-441 #cwe-913