#cwe-94

共收录 1477 条相关情报。

← 返回所有主题

漏洞预警2026-06-29 发布INFO

A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/mod_amenities/co...

CVE-2026-13554

A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this vulnerability is an

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-29 发布INFO

A vulnerability has been found in GotoHTTP up to 10.2. This issue affects some unknown processing of the file /reg.12x. The manipulation of the argument sn leads to cross site s...

CVE-2026-13536

A vulnerability has been found in GotoHTTP up to 10.2. This issue affects some unknown processing of the file /reg.12x.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-28 发布INFO

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. ...

CVE-2026-13504

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code o

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-28 发布INFO

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Gra...

CVE-2026-13500

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/an

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-06-28 发布INFO

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_register.php of the component Registrati...

CVE-2026-13499

A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function o

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-26 发布CRITICAL

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request ...

CVE-2026-53576

Kestra 是一个开源、事件驱动的工作流编排平台。在版本 1.0.45 和 1.3.21 之前，REST API 的认证过滤器（@Filter("/api/v1/**")）会将任何以 /configs 结尾的请求视为公共的 instanc

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-288

漏洞预警2026-06-26 发布INFO

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but t...

CVE-2026-55441

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-94 #cwe-732

漏洞预警2026-06-26 发布INFO

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with the...

CVE-2026-33646

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-26 发布INFO

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.

CVE-2026-57315

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-26 发布INFO

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert art...

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can exe

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-06-26 发布INFO

Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio...

CVE-2026-50741

Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:high

漏洞预警2026-06-26 发布INFO

Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherw...

CVE-2026-50741

Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-25 发布INFO

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, any authenticated user wit...

CVE-2026-55413

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-25 发布INFO

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) execute...

CVE-2026-57456

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/pytho

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-25 发布INFO

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dis...

CVE-2026-55895

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-94

漏洞预警2026-06-25 发布INFO

Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.

CVE-2026-56049

Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-25 发布INFO

Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.

CVE-2026-54823

Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-25 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could ha...

CVE-2026-1606

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-24 发布INFO

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape the untrusted fields (name, version, author, description) when they are seriali...

CVE-2026-55570

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it does not escape the untrusted fields (

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94 #cwe-116

漏洞预警2026-06-24 发布INFO

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, < 2.91.0, if the HTML back...

CVE-2026-44016

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-918