#cwe-94

共收录 1478 条相关情报。

漏洞预警2026-06-08 发布INFO

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipula...

CVE-2026-11518

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /user

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-08 发布INFO

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /billing.php. The manipulation ...

CVE-2026-11512

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unkno

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-08 发布INFO

A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the file /notice/All_notice of the component Notice Board Ma...

CVE-2026-11491

A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-08 发布INFO

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. P...

CVE-2026-11468

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-06 发布MEDIUM

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component ...

CVE-2026-11436

CVE-2026-11436 是影响 Mage AI 开源平台（版本 ≤0.9.79）的一个跨站脚本（XSS）漏洞。该漏洞存在于前端登录流程组件（Sign-in Flow）中，具体位于文件 mage_ai/frontend/componen

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-06 发布LOW

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes...

CVE-2026-11434

FluentCMS 0.0.5 被发现存在一个跨站脚本（XSS）漏洞，位于文件 /admin/blocks 的未知函数中（属于 Blocks Plugin 组件）。攻击者可通过远程方式利用该漏洞，但需要管理员权限且用户交互（PR:H, UI

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-05 发布INFO

A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulat...

CVE-2026-11429

A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-94

安全公告2026-06-05 发布INFO

Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(),...

CVE-2026-49493

Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:high

漏洞预警2026-06-05 发布INFO

Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block content as code via vm.runInNewContext(), allowing arbit...

CVE-2026-49493

Markdown Preview Enhanced before 0.8.28 parses Bitfield fenced code blocks with interpretJS(), which evaluates the block

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-05 发布INFO

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user....

CVE-2026-11338

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an un

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-06-05 发布INFO

A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected by this vulnerabil...

CVE-2026-11337

A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-06-05 发布INFO

DbGate: Remote Code Execution via functionName injection in loadReader endpoint

CVE-2026-48017

### Summary The `POST /runners/load-reader` endpoint in DbGate accepts a `functionName` parameter that is directly inte

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-94 #severity:high

安全公告2026-06-05 发布INFO

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

CVE-2026-47668

### Summary DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-20 #cwe-94 #cwe-1188 #severity:critical

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium ...

CVE-2026-11231

Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker t

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI ge...

CVE-2026-11218

Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-94

漏洞预警2026-06-04 发布INFO

Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts o...

CVE-2026-11157

Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to in

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-04 发布INFO

Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10928

Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromiu...

CVE-2026-10904

Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrar

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-94 #cwe-119

漏洞预警2026-06-04 发布INFO

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow (`.github/workflows/static.yml`) uses the `pull_request_t...

CVE-2026-41249

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

安全公告2026-06-03 发布INFO

browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

CVE-2026-49143

### Summary The HTTP handler `/_log` in `lib/server.js` (lines 491–515) of browserstack-runner passes unauthenticated u

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-94 #severity:high