#cwe-94

共收录 1460 条相关情报。

← 返回所有主题
漏洞预警2026-10-01 发布INFO

The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, a...

CVE-2026-92966

The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploit...

CVE-2026-51871

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat/react-agent flow.

CVE-2026-51866

In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocket user can prompt the agent to call th...

CVE-2026-51856

In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every form in which they could be supplied. An authenticated adm...

CVE-2026-102131

Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the application loaded it. An a...

CVE-2026-102130

Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an admin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to impo...

CVE-2026-102097

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protecti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file application/module...

CVE-2026-102847

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected ele

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration...

CVE-2026-86131

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attack

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布INFO

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrar...

CVE-2026-86131

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO b...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php

CVE-2026-39117

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and...

CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms supports administrator-defined PHP code which runs ...

CVE-2026-102425

Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection (with Jinja2 template sy...

CVE-2026-77177

Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute a...

CVE-2026-84154

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file us...

CVE-2026-102292

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can l...

CVE-2026-102290

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Stu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-accoun...

CVE-2026-102264

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element

历史摘要 · 未重新核验 · NVD