#cwe-94

共收录 1460 条相关情报。

← 返回所有主题
漏洞预警2026-10-06 发布INFO

Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted ...

CVE-2026-106189

Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging soci

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

CVE-2026-86540

## Overview A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first...

CVE-2026-105858

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an at...

CVE-2026-105857

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/...

CVE-2026-105950

A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

CVE-2026-105796

### Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

CVE-2026-105801

### Impact A malicious OpenAPI document processed by any `openapi-python-client` prior to 0.29.1 can generate arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before render...

CVE-2026-105801

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than...

CVE-2026-105796

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-commen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-component template inhe...

CVE-2026-82531

Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is nev

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

CVE-2026-39776

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.

CVE-2026-39725

Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

CVE-2026-32568

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Pro...

CVE-2026-105809

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a ...

CVE-2026-105808

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Ex...

CVE-2026-105708

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation ...

CVE-2026-105705

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation co...

CVE-2026-105764

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to exec...

CVE-2026-105677

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme transla

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff u...

CVE-2026-105642

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost c

历史摘要 · 未重新核验 · NVD