Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest...
CVE-2026-100839
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML hand
#cwe-94
共收录 1460 条相关情报。
← 返回所有主题Heym before 0.0.53 contains multiple independent vulnerabilities. (1) The workflow condition evaluator uses Python eval() without an effective sandbox, allowing any user who can...
CVE-2026-100865
本条目汇总了 Heym 0.0.53 之前版本中存在的五个相互独立的安全缺陷，官方 CVSS 3.1 评分为 8.8（AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H），整体属于高危。第一个缺陷位于工作流条件判断节点的
heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map/filter and fallback resolver that allows authenticated users to execute arbitra...
CVE-2026-100864
heym 是一个提供表达式引擎与工作流能力的组件，其 0.0.91 之前的版本存在一处沙箱逃逸漏洞。问题出在表达式引擎的两个相互关联的机制上：一是 DotList 结构在 map/filter 这类集合操作中对子项属性访问的解析，二是表达式
AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpString() method that fails to sanitize Liquidsoap string interpolation sequences, all...
CVE-2026-100857
CVE-2026-100857 是 AzuraCast 开源网络电台管理平台中披露的一处代码注入漏洞，影响 0.23.4 之前的所有版本。漏洞根源位于配置写入组件 ConfigWriter 的 cleanUpString() 方法：该方法在
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawS...
CVE-2026-100856
AzuraCast 是一款开源的网络电台/流媒体管理与自动化播出平台，其在 0.23.6 之前的版本中存在一处代码注入漏洞。根因是开发团队进行输入处理 API 迁移时留下了不完整的改造：早期版本使用 cleanUpString 方法对用户可
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack ("BadAML")....
CVE-2026-100839
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML hand
Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape
CVE-2026-101049 · CVE-2026-101050 · CVE-2026-100865
Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the wo
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin...
CVE-2026-97160
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVE-2026-97160
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0
A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequer...
CVE-2026-100313
A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The affected element is an unknown function of the file...
CVE-2026-100311
A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
CVE-2026-57170
Reporter: Cavan Loughran, Celvex Group Inc. Summary ------- The fix for CVE-2026-46439 (3.12.2 / 4.0.3) removed the rec
A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\ma...
CVE-2026-96810
CVE-2026-96810 是 NVD 收录的一则跨站脚本（XSS）漏洞，影响开源项目 huanzi-qch base-admin（一个基于 Java/Spring 体系的后台管理脚手架）。问题定位在 base-admin-master/
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the component KindEditor Upload Interfac...
CVE-2026-96739
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/up
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0, authenticated non-administrator u...
CVE-2026-77602
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.
OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)
CVE-2026-77602
### Summary COSMOS reads configuration from a user-writable overlay (`targets_modified/`) before the read-only plugin-i
OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)
CVE-2026-77602
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.
orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects. Attackers can inject arbitrary Jav...
CVE-2026-96759
orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator opt
orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template literals....
CVE-2026-96758
orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape
orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated code. Attackers can inject JavaScript...
CVE-2026-96757
orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string li