#cwe-94

共收录 1477 条相关情报。

漏洞预警2026-07-01 发布INFO

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead ...

CVE-2026-24249

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-07-01 发布INFO

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lea...

CVE-2026-24248

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generat

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-07-01 发布INFO

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API...

CVE-2026-56264

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js en

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:critical

漏洞预警2026-06-30 发布INFO

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplie...

CVE-2026-56264

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js en

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-30 发布INFO

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs import ...

CVE-2026-58449

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolve

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-30 发布INFO

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system co...

CVE-2026-7873

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-30 发布INFO

IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, a...

CVE-2026-10134

IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-30 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

CVE-2026-10109

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-30 发布INFO

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting...

CVE-2026-58138

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-30 发布INFO

A vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Studio Pro 10.12 (All versions), Mendix Studio Pro 10.13 (All versions), Mendix Studio Pro ...

CVE-2026-48192

A vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Studio Pro 10.12 (All versions), M

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-30 发布INFO

LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious mode...

CVE-2026-58116

LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-829

安全公告2026-06-29 发布INFO

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the...

CVE-2026-37637

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php compon

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:critical

漏洞预警2026-06-29 发布INFO

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component

CVE-2026-37637

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php compon

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-06-29 发布INFO

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI...

CVE-2026-13749

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:high

漏洞预警2026-06-29 发布INFO

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundli...

CVE-2026-13749

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 a

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-29 发布INFO

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users_handler.php of the component User Registra...

CVE-2026-13570

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-29 发布INFO

A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler...

CVE-2026-13567

A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Fr

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-29 发布INFO

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /report/addreport of the component Repor...

CVE-2026-13558

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown proces

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-29 发布INFO

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/mod_room/controller.php?action=add ...

CVE-2026-13557

A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown co

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-29 发布INFO

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/mod_users/controller.php?action=edit of the co...

CVE-2026-13556

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94