#cwe-99

共收录 39 条相关情报。

← 返回所有主题
安全公告2026-09-23 发布INFO

Moquette client IDs can cause cross-session H2 durable-queue corruption

CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95844 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95848 · CVE-2026-95847

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as q

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could h...

CVE-2026-3855

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the t...

CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the nam...

CVE-2026-81521

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserv

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver

CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-11 发布INFO

Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-62910

Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulatio...

CVE-2026-15186

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

macrozheng mall Portal Endpoint create resource injection

CVE-2026-15186

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-06-28 发布INFO

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown...

CVE-2026-13493

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file ba

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-28 发布INFO

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file backend/controller/conversation_api.py of the component Wor...

CVE-2026-13493

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file ba

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

A security flaw has been discovered in medkey-org medkey up to fc09b7ba9441ff590b72d428d5380834216b09ed. Impacted is the function actionGetPatientById of the file app\modules\me...

CVE-2026-12207

A security flaw has been discovered in medkey-org medkey up to fc09b7ba9441ff590b72d428d5380834216b09ed. Impacted is the

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this...

CVE-2026-10624

A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unk

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the com...

CVE-2026-10624

A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unk

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue...

CVE-2026-10299

A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown p

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipul...

CVE-2026-10299

A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown p

历史摘要 · 未重新核验 · NVD

安全公告2026-05-31 发布INFO

A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management...

CVE-2026-10168

A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad11

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-31 发布MEDIUM

A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected is the function ...

CVE-2026-10168

CVE-2026-10168 是 OUSL-GROUP-BrinaryBrains 开发的学校学生管理系统(School Student Management System)中的一个安全漏洞。该漏洞影响截至 commit 1e70e5ad1

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function...

CVE-2026-7303

A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function logDetailCat of the file xx

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function logDetailCat of the file xxl-job-admin/src/main/java/com/xxl/job/admin/controller/bi...

CVE-2026-7303

A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function logDetailCat of the file xx

历史摘要 · 未重新核验 · NVD