Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169
CVE-2026-96366
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
2026-10-23 归档
今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Webform - Less critical - Denial of service - SA-CONTRIB-2026-170
CVE-2026-96365
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
CVE-2026-96364
Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172
CVE-2026-96357
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174
CVE-2026-96356
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175
CVE-2026-96355
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Inject
Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188
CVE-2026-96377
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc
CVE-2026-114717
CVE-2026-114717
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a messa
CVE-2026-114716
CVE-2026-114716
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
CVE-2026-114715
CVE-2026-114715
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Mo
CVE-2026-114714
CVE-2026-114714
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail
massCodeIO massCode Local HTTP Service index.ts information disclosure
CVE-2026-114574
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/
oretnom23 php-travel-agency-system update.php sql injection
CVE-2026-114441
A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the
oretnom23 php-travel-agency-system delete.php sql injection
CVE-2026-114440
A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del
oretnom23 php-travel-agency-system Session session.php missing authentication
CVE-2026-114439
A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali
Laravel TokenGuard authentication bypass through non-string API credentials
CVE-2026-114509
Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based AP
Laravel relationship inclusion can trigger unauthorized data destruction
CVE-2026-114508
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read
Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request
CVE-2026-112921
Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher st
Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts
CVE-2026-94423
Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke
Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no
CVE-2026-94140
Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St