#cwe-94

共收录 1478 条相关情报。

← 返回所有主题
安全公告2026-05-02 发布INFO

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets...

CVE-2026-2052

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vuln

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-02 发布INFO

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, an...

CVE-2026-2052

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vuln

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布MEDIUM

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scri...

CVE-2026-7596

该漏洞存在于 nextlevelbuilder 的 ui-ux-pro-max-skill 项目中,影响版本直到 2.5.0。漏洞位于 Slide Generator 组件的 generate-slide.py 文件中,具体是 data.g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布MEDIUM

A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this vulnerability is the function _format_plugins of the file .claude/skills/ui-styling/s...

CVE-2026-7595

该漏洞存在于 nextlevelbuilder 项目的 ui-ux-pro-max-skill 组件中,影响版本直至 2.5.0。受影响的函数是 `_format_plugins`,位于文件 `.claude/skills/ui-styli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Process_mrld of the file lib/Image/ExifTool/GM.pm of the component JPEG/QuickTime/MOV/MP4. The man...

CVE-2026-7580

A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Process_mrld of the file lib/Image/ExifTo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary...

CVE-2026-6543

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. ...

CVE-2026-7508

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/page

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensi...

CVE-2026-6543

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipula...

CVE-2026-7501

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary...

CVE-2026-36340

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose e

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function

CVE-2026-36340

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quic...

CVE-2025-14576

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicio

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit...

CVE-2026-34965

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection en

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

n8n has a Python Task Runner Sandbox Escape Vulnerability

CVE-2026-42234

## Impact An authenticated user with permission to create or modify workflows containing a Python Code Node could escape

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?acti...

CVE-2026-7401

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with collectio...

CVE-2026-34965

Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection en

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path parameter ...

CVE-2026-7466

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The m...

CVE-2026-7390

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/logic/FilemanagerLogic.php of the component Template File ...

CVE-2026-7388

A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function save_user of the file /admin/ajax.php?action=save_user. Ex...

CVE-2026-7297

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function s

历史摘要 · 未重新核验 · NVD