共收录 1468 条相关情报。
← 返回所有主题CVE-2026-70431
Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Sc
CVE-2026-70553
MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP
CVE-2026-70477
-- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a vulnerability affe
CVE-2026-65804
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized atta
CVE-2026-18667
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an
CVE-2026-65804
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized atta
CVE-2026-18667
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an
CVE-2026-18682
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api
CVE-2026-66065
Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to
CVE-2026-61523
WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated
CVE-2026-69088
Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in blueprint
CVE-2026-67340
ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) b
CVE-2026-67340
ArcadeDB 是一款多模型数据库。在版本 26.7.2 之前，其 arcadedb-engine 组件存在一个严重的安全漏洞（CVE-2026-67340）。漏洞的根源在于 ScriptTriggerExecutor 类在处理 Java
CVE-2026-67340
ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) b
CVE-2026-16144
The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all
CVE-2026-16144
The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all
CVE-2026-68770
sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code e
CVE-2026-68770
sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code e
CVE-2026-53510
Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL
CVE-2026-53510
### Impact `Savon::Model` generated SOAP operation methods by interpolating operation names into Ruby source passed to