#cwe-94

共收录 1468 条相关情报。

← 返回所有主题
漏洞预警2026-08-06 发布INFO

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulation leads to code injection. The attack needs to be perfo...

CVE-2026-19060

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such manipulat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The man...

CVE-2026-19058

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter

历史摘要 · 未重新核验 · NVD

安全公告2026-08-06 发布INFO

OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri

CVE-2026-48054

OpenZeppelin Contracts Wizardis a web application to interactively build a contract out of components from OpenZeppelin

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Decidim: HTML content blocks allow stored script execution

CVE-2026-45572

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-06 发布INFO

Mermaid allows CSS injection applying to sibling elements of the diagram

CVE-2026-50159

### Summary Mermaid does not fully restrict CSS to the rendered SVG subtree. Although selectors are prefixed with `#mer

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-06 发布INFO

Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.

CVE-2026-66709

Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated Remote Code Execution (RCE) in Spider Analyser &#8211; WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.

CVE-2026-65553

Unauthenticated Remote Code Execution (RCE) in Spider Analyser &#8211; WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.

CVE-2026-65548

Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the ...

CVE-2026-67531

FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. S...

CVE-2026-18968

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /__nuxt_island/ props into a dynam...

CVE-2026-71320

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the Vite HMR WebSocke...

CVE-2026-71319

Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) expos

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulner...

CVE-2026-55522

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑genera...

CVE-2026-9196

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic As

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

CVE-2026-8478

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests.

CVE-2026-8182

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.

CVE-2026-17633

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security s...

CVE-2026-17632

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 cou...

CVE-2026-17624

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, the mode option of we...

CVE-2026-70609

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7,

历史摘要 · 未重新核验 · NVD