ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path...
CVE-2026-108693
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscrip
2026-10-11 归档
今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。
← 返回归档列表eladmin through commit 55fbf70 contains a missing authorization vulnerability in the...
CVE-2026-108706
eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allo
CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged...
CVE-2026-108704
CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged authenticated users to
CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that...
CVE-2026-108696
CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated c
CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource...
CVE-2026-108703
CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows authe
1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval...
CVE-2026-108702
1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowin
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows...
CVE-2026-108700
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list
mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated...
CVE-2026-108690
mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other sh
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated...
CVE-2026-108691
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to de
1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in...
CVE-2026-108692
1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldControll
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows...
CVE-2026-108689
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write in
Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController...
CVE-2026-108688
Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108673
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108671
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP se
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108676
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles ha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108675
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController...
CVE-2026-108674
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api...
CVE-2026-108677
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-pri
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles...
CVE-2026-108678
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108680
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa