#cwe-94

共收录 1460 条相关情报。

漏洞预警2026-10-05 发布INFO

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into its options, and ho...

CVE-2026-12171

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-88 #cwe-94 #cwe-829 #cwe-918

安全公告2026-10-05 发布INFO

auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF

CVE-2026-12171

auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the aut

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-829 #cwe-88 #cwe-918 #cwe-94

漏洞预警2026-10-05 发布INFO

A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component Plu...

CVE-2026-105329

A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

安全公告2026-10-05 发布INFO

TallCMS PluginManager ThemeManager.php code injection

CVE-2026-105329

A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-74 #cwe-94

漏洞预警2026-10-05 发布INFO

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/backends/elasticsearch_backend.py of the component more_l...

CVE-2026-105315

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-95

安全公告2026-10-05 发布INFO

django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection

CVE-2026-105315

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94 #cwe-95

漏洞预警2026-10-05 发布INFO

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupCon...

CVE-2026-105291

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-05 发布INFO

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormMode...

CVE-2026-105289

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_deco

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-05 发布INFO

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions....

CVE-2026-105288

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexCon

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-05 发布INFO

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required t...

CVE-2026-104811

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected insta

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-94 #cwe-434 #cwe-829

漏洞预警2026-10-05 发布MEDIUM

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component N...

CVE-2026-105226

CVE-2026-105226 影响 osCommerce 旗下的开源电商系统 osCommerce2，受影响范围为 2.3.4.1 及更早版本。漏洞位于后台新闻通讯管理组件（Newsletter Management）对应的文件 admi

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-10-05 发布INFO

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page....

CVE-2026-105225

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file in

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-10-05 发布INFO

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHis...

CVE-2026-105188

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an un

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-10-05 发布INFO

osCommerce osCommerce2 Payment payment.php include code injection

CVE-2026-105225

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file in

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-74 #cwe-94

漏洞预警2026-10-05 发布INFO

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the com...

CVE-2026-105173

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanres

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-04 发布INFO

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner A...

CVE-2026-105135

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-10-04 发布LOW

A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket ...

CVE-2026-105099

该漏洞披露自 NVD,影响 Omega Solution 出品的 CoinEx Crypto 2025 产品。问题位于 /user/ticket 路径所对应的工单(Ticket)功能中的“工单附件上传”(Ticket Attachment

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-10-03 发布INFO

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is...

CVE-2026-92084

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shor

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:critical

安全公告2026-10-03 发布INFO

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in...

CVE-2026-100157

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:medium

安全公告2026-10-03 发布INFO

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in...

CVE-2026-103519

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:medium