共收录 1460 条相关情报。
← 返回所有主题CVE-2026-109347
Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATT
CVE-2026-109308
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::acti
CVE-2026-108908
A vulnerability was identified in Netcore NR268 1.7.121109. Affected by this vulnerability is the function eval of the f
CVE-2026-109347
Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATT
CVE-2026-109308
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::acti
CVE-2026-108898
A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Sett
CVE-2026-109199
LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to exec
CVE-2026-108834
A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file
CVE-2026-108827
A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/inc
CVE-2026-108816
A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code o
CVE-2026-108815
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The ma
CVE-2026-108802
A weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawer of the file /syste
CVE-2026-108566
A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file temp
CVE-2026-108566
A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file temp
CVE-2026-62098
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
CVE-2026-42696
Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 versions.
CVE-2026-39802
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
CVE-2026-108598
Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attack
CVE-2026-108593
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings
CVE-2026-103071
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooC