#cwe-93

共收录 163 条相关情报。

漏洞预警2026-09-30 发布INFO

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interfac...

CVE-2026-102145

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-30 发布INFO

In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written ...

CVE-2026-102136

In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a valu

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt values verbatim to the line-oriented pyvenv.cfg format w...

CVE-2026-102938

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-29 发布INFO

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authent...

CVE-2026-82973

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a r

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

安全公告2026-09-29 发布INFO

Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox

CVE-2026-82973

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a r

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-93

安全公告2026-09-26 发布INFO

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl...

CVE-2026-100717

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-93 #severity:high

漏洞预警2026-09-26 发布INFO

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed characters only in the path, query and frag...

CVE-2026-100717

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

安全公告2026-09-26 发布INFO

froxlor before 2.3.12 CRLF Injection via validateUrl userinfo

CVE-2026-100717

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-93

安全公告2026-09-24 发布INFO

zbateson/mail-mime-parser has CRLF header injection via attachment filename

CVE-2026-61815

### Impact A CRLF (carriage-return / line-feed) header injection affecting any application that uses this library to b

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-93 #severity:high

漏洞预警2026-09-22 发布INFO

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticated user to inject additional Livestat...

CVE-2026-90990

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 a

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

安全公告2026-09-20 发布INFO

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead dep

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-93 #severity:medium

漏洞预警2026-09-19 发布MEDIUM

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA p...

CVE-2026-94057

Exim 是广泛部署的开源邮件传输代理（MTA），承担大量互联网与内网邮件的接收、转发与投递。NVD 披露 CVE-2026-94057：4.100.1 之前的 Exim 版本存在「SMTP 走私」（SMTP smuggling）问题。该缺

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-18 发布INFO

A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote ...

CVE-2026-93576

A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-18 发布INFO

An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86...

CVE-2026-40530

An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manage

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-18 发布INFO

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86...

CVE-2026-13666

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Man

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-14 发布INFO

A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/m...

CVE-2026-90819

A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSe

历史摘要 · 未重新核验 · NVD

#cve #cwe-93 #cwe-113

漏洞预警2026-09-11 发布INFO

The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unau...

CVE-2026-86813

The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

安全公告2026-09-05 发布INFO

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an...

CVE-2026-75925

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-93 #severity:critical

漏洞预警2026-09-04 发布HIGH

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mail...

CVE-2026-48019

Laravel 是一个流行的 PHP Web 应用框架。在 12.60.0 和 13.10.0 之前的版本中，其电子邮件验证功能存在 CRLF 注入漏洞。该漏洞与 Symfony Mailer 和 Symfony Mime 处理特定字符序列

历史摘要 · 未重新核验 · NVD

#cve #cwe-93

漏洞预警2026-09-04 发布INFO

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the ...

CVE-2026-75925

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands

历史摘要 · 未重新核验 · NVD

#cve #cwe-93