#cwe-94
共收录 1468 条相关情报。
← 返回所有主题 漏洞预警2026-07-19 发布INFO
CVE-2026-16229
A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-19 发布INFO
CVE-2026-16220
A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code o
历史摘要 · 未重新核验 · NVD
安全公告2026-07-17 发布INFO
CVE-2026-8635
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipul
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-17 发布INFO
CVE-2026-8481
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-17 发布INFO
CVE-2026-8056
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-17 发布INFO
CVE-2026-9135
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) co
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-17 发布INFO
CVE-2026-8635
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipul
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-8481
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-8056
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API
历史摘要 · 未重新核验 · NVD
安全公告2026-07-17 发布INFO
CVE-2026-53597
## Summary
The TypeScript Prompty loader used `gray-matter` without overriding executable frontmatter engines. `gray-mat
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-17 发布INFO
CVE-2026-9135
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) co
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-16073
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function S
历史摘要 · 未重新核验 · NVD
安全公告2026-07-17 发布INFO
CVE-2026-9198
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-17 发布INFO
CVE-2026-9762
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under u
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-17 发布INFO
CVE-2026-9762
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under u
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-9198
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-16008
A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parseP
历史摘要 · 未重新核验 · NVD
安全公告2026-07-17 发布INFO
CVE-2026-16008
A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parseP
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-07-16 发布INFO
CVE-2026-52833
## Summary
Nuclio's Java runtime generates a `build.gradle` file during function builds using Go's `text/template` pack
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-16 发布INFO
CVE-2026-46512
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply accepted template para
历史摘要 · 未重新核验 · NVD