#cwe-94

共收录 1460 条相关情报。

漏洞预警2026-09-23 发布INFO

orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date() calls. Attackers ...

CVE-2026-96756

orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to e

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-23 发布INFO

orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema defaults into template literals. Attacker...

CVE-2026-96755

orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-23 发布INFO

orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI path values in single-quoted route literals. Attack...

CVE-2026-96754

orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape Op

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-09-23 发布INFO

orval before 8.29.0 Code Injection via operationId

CVE-2026-96759

orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator opt

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

安全公告2026-09-23 发布INFO

orval before 8.29.0 Code Injection via unescaped OpenAPI media-type

CVE-2026-96757

orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string li

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

安全公告2026-09-23 发布INFO

orval before 8.30.0 Code Injection via Factory Generation

CVE-2026-96756

orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to e

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

安全公告2026-09-23 发布INFO

orval @orval/effect 8.14.0 through 8.28.1 Code Injection

CVE-2026-96755

orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

安全公告2026-09-23 发布INFO

orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path

CVE-2026-96754

orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape Op

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

漏洞预警2026-09-23 发布INFO

webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-controlled template code that built-in secur...

CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into execut

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-23 发布INFO

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited...

CVE-2026-96442

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends oth

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-23 发布INFO

The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers...

CVE-2026-75799

The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-23 发布INFO

A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file /forgotpasswd.html of the component P...

CVE-2026-96258

A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unkno

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-23 发布INFO

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file student_signup.php of the compo...

CVE-2026-95957

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...

CVE-2026-18162

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:critical

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input with...

CVE-2026-18162

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-09-22 发布INFO

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

CVE-2026-76819

A vulnerability in the Goja JavaScript engine used by Nuclei's `javascript:` protocol allows arbitrary native code execu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-94 #cwe-787 #severity:high

漏洞预警2026-09-22 发布INFO

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual...

CVE-2026-95657

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSe

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the conte...

CVE-2026-89276

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability t

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the conte...

CVE-2026-89275

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability t

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-22 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the conte...

CVE-2026-84412

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability t

历史摘要 · 未重新核验 · NVD

#cve #cwe-94