Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules...
CVE-2026-111914
Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php
#advisory
共收录 22969 条相关情报。
← 返回所有主题Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in...
CVE-2026-111918
Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that al
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in...
CVE-2026-111912
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic()
Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project...
CVE-2026-111921
Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write per
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows...
CVE-2026-111913
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to expor
Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows...
CVE-2026-111917
Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep WebSocket
Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows...
CVE-2026-111919
Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed collaborators to ke
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that...
CVE-2026-111904
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated atta
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its...
CVE-2026-111895
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID logi
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that...
CVE-2026-111898
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to tak
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization...
CVE-2026-111900
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.p
phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST ...
CVE-2026-111907
phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database e
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability...
CVE-2026-111896
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that al
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level...
CVE-2026-111908
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows...
CVE-2026-111897
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted ed
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery...
CVE-2026-111906
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elast
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in...
CVE-2026-111903
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption...
CVE-2026-111901
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticate
phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object...
CVE-2026-111905
phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in...
CVE-2026-111902
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that t