目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

zauberzeug 厂商漏洞列表 / CVE 中文分析 17

zauberzeug 厂商相关 17 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

该厂商专注于开发安全测试工具，主要提供漏洞扫描和渗透测试解决方案。历史上，其产品常见漏洞类型包括远程代码执行、跨站脚本和权限绕过问题。截至最新统计，已记录15条CVE漏洞，多数涉及输入验证不足和配置缺陷。安全团队建议用户及时更新至最新版本，并严格遵循最小权限原则部署相关工具，以降低潜在风险。

上位製品 zauberzeug: nicegui
CVE IDタイトルCVSS深刻度公開日
CVE-2026-45554 NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routes — niceguiCWE-248 5.3 Medium2026-06-02
CVE-2026-45553 NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text() — niceguiCWE-200 7.5 High2026-06-02
CVE-2026-39844 NiceGUI has a Path Traversal in NiceGUI Upload Filename on Windows via Backslash Bypass of PurePosixPath Sanitization — niceguiCWE-22 5.9 Medium2026-04-08
CVE-2026-33332 NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion — niceguiCWE-20 7.5 -2026-03-24
CVE-2026-27156 NiceGUI has XSS via Code Injection — niceguiCWE-79 6.1 Medium2026-02-24
CVE-2026-25516 NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content — niceguiCWE-79 6.1 Medium2026-02-06
CVE-2026-25732 NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write — niceguiCWE-22 7.5 High2026-02-06
CVE-2026-21874 NiceGUI has Redis connection leak via tab storage causes service degradation — niceguiCWE-772 5.3 Medium2026-01-08
CVE-2026-21873 Zero-click XSS in all NiceGUI apps which uses `ui.sub_pages` — niceguiCWE-79 7.2 High2026-01-08
CVE-2026-21872 NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links — niceguiCWE-79 6.1 Medium2026-01-08
CVE-2026-21871 NiceGUI is vulnerable to XSS via Unescaped URL in ui.navigate.history.push() / replace() — niceguiCWE-79 6.1 Medium2026-01-08
CVE-2025-66645 NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading — niceguiCWE-22 7.5 High2025-12-09
CVE-2025-66470 NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content — niceguiCWE-79 6.1 Medium2025-12-09
CVE-2025-66469 NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Injection — niceguiCWE-79 6.1 Medium2025-12-08
CVE-2025-53354 NiceGUI is vulnerable to Reflected XSS attack — niceguiCWE-79 6.1 Medium2025-10-03
CVE-2025-21618 NiceGUI On Air authentication issue — niceguiCWE-287 7.5 High2025-01-06
CVE-2024-32005 Local File Inclusion in NiceGUI leaflet component — niceguiCWE-23 8.2 High2024-04-12

本页汇总了 zauberzeug 厂商截至目前公开的全部 17 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。