#cwe-94

共收录 1460 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布HIGH

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ult...

CVE-2026-118618

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers t

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ult...

CVE-2026-118616

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers t

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations ...

CVE-2026-118614

Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attac

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentia...

CVE-2026-67074

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布MEDIUM

Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Impr...

CVE-2026-81472

Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (i

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to exec...

CVE-2026-104383

Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premise

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector co...

CVE-2026-58256

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an adminis

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules

CVE-2026-116692

## Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. Dur

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布CRITICAL

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization ...

CVE-2026-116692

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the a...

CVE-2026-117526

A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

reduxjs redux-devtools Remotedev Server evalAction code injection

CVE-2026-117526

A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-27 发布CRITICAL

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the curre...

CVE-2026-48360

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resul

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the conte...

CVE-2026-104351

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布CRITICAL

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE)...

CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light B

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8197510c0910f759e06ee67251e5. Affected by this vulnerabili...

CVE-2026-116640

A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file cha...

CVE-2026-116639

A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd2

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that...

CVE-2026-116811

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布HIGH

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member to bypass the AST allowlist by aliasing the Function cons...

CVE-2026-116811

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextFi...

CVE-2026-116556

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/s...

CVE-2026-116555

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f

历史摘要 · 未重新核验 · NVD