#cwe-94

共收录 1460 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布HIGH

virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at ...

CVE-2026-113776

virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or desti...

CVE-2026-113718

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an unauthenticated non-browser WebSocket client that ...

CVE-2026-112949

Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the compo...

CVE-2026-113388

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the argumen...

CVE-2026-113383

A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

CVE-2026-43857

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of t...

CVE-2026-112371

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to inject Yii behaviors by supplying a JSON-string fie...

CVE-2026-112774

Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrato

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox via Asset::getMimeType...

CVE-2026-112772

Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Pane

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the fi...

CVE-2026-112247

A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information Sys

历史摘要 · 未重新核验 · NVD

安全公告2026-10-17 发布INFO

A security flaw has been discovered in THU-MIG yoloe up to...

CVE-2026-111865

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the fu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-16 发布INFO

TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file ...

CVE-2026-55543

TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path

来源摘录 · NVD

安全公告2026-10-16 发布INFO

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected...

CVE-2026-111212

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

A weakness has been identified in Ultralytics FastSAM up to...

CVE-2026-111237

A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4...

CVE-2026-100159

The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is du

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode...

CVE-2026-92097

The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....

CVE-2026-110445

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....

CVE-2026-110444

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability

CVE-2026-102870

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布HIGH

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-85359

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker t

来源摘录 · NVD