Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in...
CVE-2026-111918
Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that al
2026-10-18 归档
今日共收录 723 条安全情报，包含 0 个 CVE，397 篇安全通告，以及 78 篇研究论文。
← 返回归档列表Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in...
CVE-2026-111912
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic()
Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project...
CVE-2026-111921
Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write per
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows...
CVE-2026-111913
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to expor
Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows...
CVE-2026-111917
Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep WebSocket
Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows...
CVE-2026-111919
Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed collaborators to ke
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization...
CVE-2026-111900
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.p
phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST ...
CVE-2026-111907
phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database e
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability...
CVE-2026-111896
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that al
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level...
CVE-2026-111908
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows...
CVE-2026-111897
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted ed
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery...
CVE-2026-111906
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elast
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in...
CVE-2026-111903
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption...
CVE-2026-111901
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticate
phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object...
CVE-2026-111905
phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in...
CVE-2026-111902
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that t
phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that...
CVE-2026-111909
phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated n
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in...
CVE-2026-111893
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRes
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in...
CVE-2026-111885
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGro
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in...
CVE-2026-111890
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUse