#cwe-94

共收录 1478 条相关情报。

漏洞预警2026-05-11 发布INFO

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such manipulation leads ...

CVE-2026-8256

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-11 发布INFO

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventory/add_new_customer. This manipulation causes cross site s...

CVE-2026-8255

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventor

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-11 发布INFO

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/sales_save. The manipulati...

CVE-2026-8254

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-11 发布INFO

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. The manipu...

CVE-2026-8253

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

安全公告2026-05-10 发布INFO

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated...

CVE-2021-47939

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:high

安全公告2026-05-10 发布INFO

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to...

CVE-2022-50944

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:high

安全公告2026-05-10 发布INFO

ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative...

CVE-2021-47938

ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows au

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:high

安全公告2026-05-10 发布INFO

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers...

CVE-2021-47935

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary co

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-94 #severity:high

漏洞预警2026-05-10 发布INFO

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image param...

CVE-2022-50944

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-05-10 发布INFO

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injec...

CVE-2021-47939

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-05-10 发布INFO

ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP code by in...

CVE-2021-47938

ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows au

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-05-10 发布INFO

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects t...

CVE-2021-47935

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary co

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-05-10 发布LOW

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. Th...

CVE-2026-8221

该漏洞影响 Devs Palace ERP Online 至 4.0.0 版本。问题存在于 /inventory/item-save 文件中的未知功能，导致跨站脚本（XSS）漏洞。攻击者可通过远程方式利用此漏洞，但需要高权限（PR:H）并诱

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-10 发布LOW

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site...

CVE-2026-8220

该漏洞影响 Devs Palace ERP Online 版本 4.0.0 及更早版本。问题存在于文件 /inventory/customer-save 的未知函数中，攻击者可以通过远程方式操纵该函数，导致跨站脚本攻击（XSS）。尽管 CV

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-10 发布LOW

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulat...

CVE-2026-8219

Devs Palace ERP Online 至 4.0.0 版本存在跨站脚本（XSS）漏洞，该漏洞位于 /inventory/supplier-save 文件的未知函数中。攻击者可以通过远程方式利用该漏洞，但需要高权限用户交互（UI:R）

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-10 发布LOW

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the file /inventory/purchase_return_save. Executing a manipu...

CVE-2026-8218

Devs Palace ERP Online 至 4.0.0 版本中存在一个跨站脚本（XSS）漏洞，具体位于 /inventory/purchase_return_save 文件中的未知函数。攻击者可通过远程方式利用该漏洞，向受影响页面注入

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-09 发布MEDIUM

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file org/codelibs/fess/app/web/admin/design/AdminDesignAction.ja...

CVE-2026-8211

CVE-2026-8211 是影响 codelibs Fess（一个开源企业搜索服务器）至 15.5.1 版本的高危漏洞。漏洞位于 JSP 文件处理组件中的 `org/codelibs/fess/app/web/admin/design/A

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-94

漏洞预警2026-05-09 发布MEDIUM

A vulnerability was detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modul...

CVE-2026-8195

CVE-2026-8195 影响 JeecgBoot 至 3.9.1 版本。该漏洞位于 jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-05-08 发布INFO

Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-dock...

CVE-2026-42298

Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Pu

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-05-08 发布INFO

Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arrow_tensor_v2, ray....

CVE-2026-41486

Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension typ

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-502