共收录 1460 条相关情报。
← 返回所有主题CVE-2026-108551
openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an O
CVE-2026-108551
openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an O
CVE-2026-97670
The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
CVE-2026-104021
The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.
CVE-2026-108259
Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMI
CVE-2026-108259
### Summary `@tinacms/cli` inserts the raw Git branch value into the generated `client.ts` source without escaping or e
CVE-2026-107806
## Summary An authenticated nginx-ui user can call `POST /api/restore`, upload a forged encrypted backup, restore `app.
CVE-2026-104082
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-
CVE-2026-104082
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-
CVE-2026-107806
Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with a
CVE-2026-107806
Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with a
CVE-2026-11888
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an
CVE-2026-107700
dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScrip
CVE-2026-105642
### Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user
CVE-2026-105858
### Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. **You are aff
CVE-2026-93674
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutraliza
CVE-2026-104334
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of
CVE-2026-93443
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro
CVE-2026-97674
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due t
CVE-2026-97655
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete block