#cwe-94

共收录 1460 条相关情报。

← 返回所有主题
漏洞预警2026-11-01 发布LOW

A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing...

CVE-2026-120218

A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of th

来源摘录 · NVD

漏洞预警2026-11-01 发布LOW

A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-fo...

CVE-2026-120190

A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functio

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布HIGH

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attac...

CVE-2026-120203

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布HIGH

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery (CI/CD) w...

CVE-2026-116964

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布HIGH

A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow ...

CVE-2026-116086

A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all ver...

CVE-2026-101326

The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all ver...

CVE-2026-100155

The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布HIGH

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a vali...

CVE-2026-63378

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter name in `parameters[].name` with `in: header` is emitted ver...

CVE-2026-63346

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter nam

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object keys are emitted verbatim into Refit route attributes such...

CVE-2026-63345

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object k

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in the content maps of `requestBody/responses` are emitted verb...

CVE-2026-63344

Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in the

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and passes it to an unsandb...

CVE-2026-62853

ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-s

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with ...

CVE-2026-62284

OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfi

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.

CVE-2026-116852

Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, ...

CVE-2026-118635

The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.19 This is due to th...

CVE-2026-102905

The The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to arbitrary shortcode execution in al

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handl...

CVE-2026-119717

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute P

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. A...

CVE-2026-119716

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to exe

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticated attackers to execute registered shortcodes via the mcs ...

CVE-2026-119714

My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticate

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates upload...

CVE-2026-61707

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,

来源摘录 · NVD