#cwe-94

共收录 1468 条相关情报。

← 返回所有主题
漏洞预警2026-07-19 发布INFO

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipul...

CVE-2026-16229

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布INFO

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the ...

CVE-2026-16220

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code o

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to...

CVE-2026-8635

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in...

CVE-2026-8481

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters...

CVE-2026-8056

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit...

CVE-2026-9135

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) co

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, an...

CVE-2026-8635

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts...

CVE-2026-8481

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical security flaw exists in the parameter filter...

CVE-2026-8056

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

CVE-2026-53597

## Summary The TypeScript Prompty loader used `gray-matter` without overriding executable frontmatter engines. `gray-mat

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies comp...

CVE-2026-9135

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function Star.text_to_image/NetworkRenderStrategy.render of the fil...

CVE-2026-16073

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function S

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1...

CVE-2026-9198

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution...

CVE-2026-9762

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under u

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

CVE-2026-9762

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (exe...

CVE-2026-9198

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDepe...

CVE-2026-16008

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parseP

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

sagold json-schema-library propertyDependencies.ts parsePropertyDependencies prototype pollution

CVE-2026-16008

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parseP

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-16 发布INFO

Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE

CVE-2026-52833

## Summary Nuclio's Java runtime generates a `build.gradle` file during function builds using Go's `text/template` pack

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply accepted template parameters including greeting, dest, url, extension, code, an...

CVE-2026-46512

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_dialplan_apply accepted template para

历史摘要 · 未重新核验 · NVD