#cwe-94
共收录 1460 条相关情报。
← 返回所有主题 漏洞预警2026-10-06 发布INFO
CVE-2026-106189
Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging soci
历史摘要 · 未重新核验 · NVD
安全公告2026-10-06 发布INFO
CVE-2026-86540
## Overview
A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-06 发布INFO
CVE-2026-105858
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105857
Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105950
A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::
历史摘要 · 未重新核验 · NVD
安全公告2026-10-06 发布INFO
CVE-2026-105796
### Impact
An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-06 发布INFO
CVE-2026-105801
### Impact
A malicious OpenAPI document processed by any `openapi-python-client` prior to 0.29.1 can generate arbitrary
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-06 发布INFO
CVE-2026-105801
openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely ne
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105796
Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-commen
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-82531
Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is nev
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-39776
Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-39725
Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-32568
Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105809
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105808
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the f
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105708
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105705
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-105764
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-05 发布INFO
CVE-2026-105677
Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme transla
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-05 发布INFO
CVE-2026-105642
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost c
历史摘要 · 未重新核验 · NVD