#cwe-94

共收录 1460 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布LOW

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components/features/annotation/settings/Setting...

CVE-2026-116554

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Executing a manipulation of the argumen...

CVE-2026-116514

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.6.0 until 1.6.11, the JavaScript-output APIs derive...

CVE-2026-116583

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. F

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected is an unknown function of the file patien...

CVE-2026-116482

A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer DLL-loading logic

CVE-2026-107091

An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code vi

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scrip...

CVE-2026-116227

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtua

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_p...

CVE-2026-116103

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_tx

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipu...

CVE-2026-116100

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname lea...

CVE-2026-116097

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addne

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEngine.eval of the file JuelScriptEngine.java. Performing a ...

CVE-2026-116058

A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEng

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Su...

CVE-2026-116047

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file

来源摘录 · NVD

漏洞预警2026-10-25 发布LOW

A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx...

CVE-2026-116004

A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file

来源摘录 · NVD

漏洞预警2026-10-24 发布MEDIUM

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rac...

CVE-2026-115982

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file

来源摘录 · NVD

漏洞预警2026-10-24 发布HIGH

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulat...

CVE-2026-115970

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat

来源摘录 · NVD

安全公告2026-10-24 发布INFO

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined...

CVE-2026-113673

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-24 发布INFO

The app/process-api-response-headers action accepts fake Craft API response headers from any...

CVE-2026-115935

The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

virtualenv: Xonsh activation literals depend on the script decoding codec

CVE-2026-113718

## Summary Caller-supplied prompt text can become executable syntax in the xonsh activation script. An attacker must in

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布HIGH

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler....

CVE-2026-115895

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4

来源摘录 · NVD

安全公告2026-10-23 发布INFO

Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution

CVE-2026-115895

## Summary The ESM compiler in `happy-dom@20.14.5` does not validate imported local binding aliases before interpolatin

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布HIGH

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF

CVE-2025-45528

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a c

来源摘录 · NVD