BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows...
CVE-2026-111367
BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to f
2026-10-16 归档
今日共收录 833 条安全情报，包含 0 个 CVE，434 篇安全通告，以及 100 篇研究论文。
← 返回归档列表cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows...
CVE-2026-111366
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to
The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`)...
CVE-2026-92228
The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role glob
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code...
CVE-2026-111356
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthentica
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows...
CVE-2026-111355
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to igno
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in...
CVE-2026-111364
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that
SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that...
CVE-2026-111358
SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated worksp
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows...
CVE-2026-111359
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefron
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-111354
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other me
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non...
CVE-2026-111365
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer...
CVE-2026-111350
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows au
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any...
CVE-2026-111345
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private
metasfresh through 5.175 contains a missing record-level authorization vulnerability in...
CVE-2026-111351
metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment...
CVE-2026-111346
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public...
CVE-2026-111347
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encry
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale...
CVE-2026-111348
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.ph
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows...
CVE-2026-111344
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer...
CVE-2026-111349
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthen
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows...
CVE-2026-111324
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwri
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that...
CVE-2026-111343
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated