#cwe-94

共收录 1478 条相关情报。

← 返回所有主题
漏洞预警2026-05-19 发布INFO

An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that a...

CVE-2026-2586

An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the key ['nne...

CVE-2025-51427

An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz. ...

CVE-2026-46586

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommen...

CVE-2026-35086

Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz. This issue a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Co...

CVE-2026-31379

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions 0.6.34 through 0.6.51, the backend deseria...

CVE-2026-33233

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-18 发布INFO

Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor...

CVE-2026-8838

Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver befor

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB...

CVE-2026-45829

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an un

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-45495

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API

CVE-2026-45719

# Security Advisory: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API **Affected Software

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-18 发布INFO

Formie: Pre-authenticated server-side template injection in Hidden fields

CVE-2026-45697

### Impact - Unauthenticated users could submit crafted values into Hidden fields (with Default value → Custom) that wer

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the serve...

CVE-2026-45829

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an un

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

A vulnerability in Command-Line Client in P4 Server prior to the 2025.2 Patch 2, identified as...

CVE-2026-6902

A vulnerability in Command-Line Client in P4 Server prior to the 2025.2 Patch 2, identified as CVE-2026-6902, has been f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

A vulnerability in Command-Line Client in P4 Server prior to the 2025.2 Patch 2, identified as CVE-2026-6902, has been fixed in P4 Server to address potential security risks.

CVE-2026-6902

A vulnerability in Command-Line Client in P4 Server prior to the 2025.2 Patch 2, identified as CVE-2026-6902, has been f

历史摘要 · 未重新核验 · NVD

安全公告2026-05-17 发布INFO

ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability...

CVE-2018-25320

ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-16 发布INFO

python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to...

CVE-2021-47952

python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-16 发布INFO

python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads contai...

CVE-2021-47952

python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated...

CVE-2021-47964

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitra

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages thr...

CVE-2021-47964

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitra

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x...

CVE-2026-35194

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated u

历史摘要 · 未重新核验 · GitHub Advisory