#cwe-94

共收录 1468 条相关情报。

漏洞预警2026-07-07 发布INFO

calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre, including through Add b...

CVE-2026-53511

calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-07-07 发布INFO

Koodo Reader: Remote code execution via malicious epub file

CVE-2026-55408

Koodo Reader is an ebook reader. In version 2.3.0 and earlier, Koodo Reader is vulnerable to remote code execution throu

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

安全公告2026-07-07 发布INFO

calibre: Arbitrary Code Execution in Template Formatter via Book Metadata

CVE-2026-53511

calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

安全公告2026-07-07 发布INFO

DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE)

CVE-2026-53751

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the H2 database JDBC URL validation l

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-94

漏洞预警2026-07-06 发布INFO

FOSSBilling is a free, open-source billing and client management system. Versions 0.6.10 through 0.7.2 have a PHP code injection vulnerability in FOSSBilling's `Config::prettyPr...

CVE-2026-43921

FOSSBilling is a free, open-source billing and client management system. Versions 0.6.10 through 0.7.2 have a PHP code i

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-07-06 发布INFO

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

CVE-2026-55794

### Requirements: * Control panel access * Permissions to edit an entry ### Details Control panel users with the abil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-94 #severity:high

漏洞预警2026-07-06 发布INFO

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chr...

CVE-2026-57572

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-

历史摘要 · 未重新核验 · NVD

#cve #cwe-88 #cwe-94

安全公告2026-07-06 发布INFO

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

CVE-2026-54769

### Advisory Details **Title**: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatA

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-94 #severity:critical

安全公告2026-07-06 发布INFO

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to...

CVE-2026-48614

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configurat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:critical

漏洞预警2026-07-06 发布INFO

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root...

CVE-2026-48614

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configurat

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-07-06 发布INFO

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of the file app/Http/Requests/InvoicesRequest.php of the co...

CVE-2026-14791

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-07-05 发布INFO

A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This affects the function add_definition of the file applicatio...

CVE-2026-14752

A security vulnerability has been detected in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. This a

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-07-05 发布INFO

A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imba_calculator...

CVE-2026-14749

A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the fu

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-07-05 发布INFO

A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts ...

CVE-2026-14722

A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-07-05 发布INFO

A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code resu...

CVE-2026-14704

A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functiona

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-07-05 发布MEDIUM

A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function update_settings_info of the file classe...

CVE-2026-14691

该漏洞存在于 SourceCodester Multi-Vendor Online Grocery Management System 1.0 中的 Setting Handler 组件，具体位于文件 classes/SystemSetti

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-07-04 发布MEDIUM

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the a...

CVE-2026-14656

CVE-2026-14656 是一个存在于 code-projects Assessment Management 1.0 中的跨站脚本 (XSS) 漏洞。该漏洞影响 /admin/remove-user.php 文件，攻击者可以通过操纵

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-07-04 发布LOW

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a man...

CVE-2026-14655

CVE-2026-14655 是 code-projects Assessment Management 1.0 中的一个跨站脚本（XSS）漏洞。该漏洞位于 admin/view-users.php 文件中，通过对参数 'User' 进行操

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-07-04 发布INFO

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e01394517. This vulnerability affects the function checkForPos...

CVE-2026-14634

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e0139

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-07-04 发布INFO

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04. This affects an unknown part of the file /index.php...

CVE-2026-14633

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d91

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94