共收录 1478 条相关情报。
← 返回所有主题CVE-2026-44403
Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization
CVE-2026-8430
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certa
CVE-2026-8429
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers t
CVE-2026-43892
AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss() sanitization leads to 1-cli
CVE-2026-42898
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized a
CVE-2026-41094
Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker t
CVE-2025-65719
An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user
CVE-2026-44295
## Summary `pbjs` static code generation could emit unsafe JavaScript identifiers derived from schema-controlled names.
CVE-2026-44293
## Summary protobufjs generated JavaScript for `toObject` conversion could include an unsafe expression derived from a
CVE-2026-44291
## Summary protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated en
CVE-2026-40129
Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticat
CVE-2026-40129
CVE-2026-40129 是 SAP Application Server ABAP (用于 SAP NetWeaver 和 ABAP Platform) 中的一个代码注入漏洞。该漏洞允许经过身份验证的攻击者向应用程序发送特制的输入，如
CVE-2026-43874
WWBN AVideo is an open source video platform. In versions up to and including 29.0, the server-side mitigation for the Y
CVE-2026-43898
### Summary Sandbox-defined functions expose `Function.caller`, allowing sandboxed code to recover the internal `LispTyp
CVE-2026-41159
### Impact Mermaid's default configuration allows injecting CSS that applies outside of the Mermaid diagram via the `fo
CVE-2026-41149
### Impact Under the default configuration, Mermaid state diagram's `classDef` allow DOM injection that escapes the SVG
CVE-2026-41148
### Details The state diagram and any other diagram type that routes user-controlled style strings through createCssSty
CVE-2026-42603
OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and m
CVE-2026-42607
Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with administrative privileges can achie
CVE-2026-8262
A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /acco