Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...
CVE-2018-7864
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No
#advisory
共收录 22969 条相关情报。
← 返回所有主题Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...
CVE-2018-7861
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...
CVE-2012-4410
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2...
CVE-2026-111933
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration v
Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113...
CVE-2026-111926
Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest h
Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware...
CVE-2026-111934
Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmos
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2...
CVE-2026-111930
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment...
CVE-2026-111923
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that all
A security flaw has been discovered in THU-MIG yoloe up to...
CVE-2026-111865
A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the fu
Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling...
CVE-2026-111931
Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated...
CVE-2026-111924
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server m
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2...
CVE-2026-111932
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML inject
Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner...
CVE-2026-111929
Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gR
Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow...
CVE-2026-111928
Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/po
Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4...
CVE-2026-111927
Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostnam
phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn...
CVE-2026-111911
phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass...
CVE-2026-111910
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php
Admidio before 5.0.16 contains an information disclosure vulnerability that allows...
CVE-2026-111916
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view rol
Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every...
CVE-2026-111922
Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port
Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models...
CVE-2026-111920
Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which res