共收录 104 条相关情报。
← 返回所有主题CVE-2026-44344
Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1,
CVE-2026-115943
Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce
CVE-2026-90872
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F
CVE-2026-119121
Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows auth
CVE-2026-44179
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 un
CVE-2026-65141
NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this
CVE-2026-63350
Affected devices do not properly restrict executable content contained in imported trace files. This could allow an a
CVE-2026-65954
PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\Abstr
CVE-2026-108263
Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow co
CVE-2026-105315
A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/
CVE-2026-105315
A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/
CVE-2026-69662
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
CVE-2026-69662
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
CVE-2024-42002
A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool
CVE-2026-101861
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows a
CVE-2026-101861
Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows a
CVE-2026-100741
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3
CVE-2026-100741
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3
CVE-2026-100741
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3
CVE-2026-100842
MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. Th