云虫漏洞情报 - 安全漏洞数据库

云虫漏洞情报：CVE 自动同步更新。

CVE-2026-37069 [未知] CVE-2026-37069 - Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepa… (CVE) 2026-08-27
CVE-2026-37068 [未知] CVE-2026-37068 - Arbitrary file write in /vfm-admin/index.php?section=translations&action=… (CVE) 2026-08-27
CVE-2026-37067 [未知] CVE-2026-37067 - Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in V… (CVE) 2026-08-27
CVE-2026-37066 [未知] CVE-2026-37066 - Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and… (CVE) 2026-08-27
CVE-2026-37065 [未知] CVE-2026-37065 - Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion … (CVE) 2026-08-27
CVE-2026-37064 [未知] CVE-2026-37064 - User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Pr… (CVE) 2026-08-27
CVE-2026-37012 [未知] CVE-2026-37012 - A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows… (CVE) 2026-08-27
CVE-2026-37009 [未知] CVE-2026-37009 - A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 al… (CVE) 2026-08-27
CVE-2026-37007 [未知] CVE-2026-37007 - A vulnerability in FileWriterTool in crewai-tools (CVE) 2026-08-27
CVE-2026-37006 [未知] CVE-2026-37006 - A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and b… (CVE) 2026-08-27
CVE-2026-37004 [未知] CVE-2026-37004 - BerriAI litellm (CVE) 2026-08-27
CVE-2026-37003 [未知] CVE-2026-37003 - Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RC… (CVE) 2026-08-27
CVE-2026-36102 [未知] CVE-2026-36102 - An issue in the inviteController.js component in Bluewave Labs Checkmate (CVE) 2026-08-27
CVE-2026-35869 [未知] CVE-2026-35869 - A Command Injection vulnerability exists in the bs_SetLimitCli_info funct… (CVE) 2026-08-27
CVE-2026-35868 [未知] CVE-2026-35868 - A Command Injection vulnerability exists in the bs_SetLimitCli_info funct… (CVE) 2026-08-27
CVE-2026-34620 [中危] CVE-2026-34620 - DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds … (CVE) 2026-08-27
CVE-2026-34616 [中危] CVE-2026-34616 - DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds … (CVE) 2026-08-27
CVE-2026-30612 [未知] CVE-2026-30612 - An issue in Time4 Popcorn for Windows (CVE) 2026-08-27
CVE-2026-25250 [中危] CVE-2026-25250 - EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing C… (CVE) 2026-08-27
CVE-2026-19092 [危急] CVE-2026-19092 - The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data… (CVE) 2026-08-27