#cwe-94

共收录 1478 条相关情报。

← 返回所有主题
漏洞预警2026-05-26 发布INFO

A vulnerability was identified in teableio teable up to 1.9.x. This impacts an unknown function of the file apps/nextjs-app/src/features/auth/pages/LoginPage.tsx of the componen...

CVE-2026-9566

A vulnerability was identified in teableio teable up to 1.9.x. This impacts an unknown function of the file apps/nextjs-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

IBM HTTP Server 8.5, and 9.0

CVE-2026-9170

IBM HTTP Server 8.5, and 9.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

CVE-2026-8855

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable ...

CVE-2026-8633

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an atta...

CVE-2026-44728

Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patie...

CVE-2026-9564

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted elem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpo...

CVE-2026-42785

OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. This issue affects some unknown processing of the file /admin/judges.php. This manipulation of the ...

CVE-2026-9527

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. This issue affects some unknown processing

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub. This impacts an unknown function of the file packages/generator/templates/app/src/app/auth/components/Log...

CVE-2026-9520

A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub. This impacts an unknown function of the file pac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0. This affects the function getServerSideProps of the file frontend/src/pages/auth/signIn.tsx of the ...

CVE-2026-9519

A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0. This affects the function getServerSidePro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file view_students.php of the component ...

CVE-2026-9518

A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-25 发布INFO

Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection. This issue affects Broadcast Live Video:...

CVE-2026-24937

Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-25 发布INFO

A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipul...

CVE-2026-9485

A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-25 发布INFO

A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This impacts an unknown function of the file /student.php. Per...

CVE-2026-9471

A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This

历史摘要 · 未重新核验 · NVD

安全公告2026-05-21 发布INFO

Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation

CVE-2026-46640

### Description The `obj.(expr)` dynamic-attribute syntax (added in 3.15.0 as the replacement for the deprecated `attri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-21 发布INFO

Twig: PHP code injection via `{% use %}` template name

CVE-2026-46633

### Description `Compiler::string()` escapes `"`, `$`, `\`, NUL and TAB when generating PHP double-quoted string litera

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-21 发布INFO

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

CVE-2026-42396

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Versions 0.102.1 and prior contain a critical securit...

CVE-2026-39311

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template gener...

CVE-2026-8467

Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on othe...

CVE-2026-22314

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesa

历史摘要 · 未重新核验 · NVD