phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that...
CVE-2026-111909
phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated n
#advisory
共收录 22969 条相关情报。
← 返回所有主题phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication...
CVE-2026-111882
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in...
CVE-2026-111893
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRes
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in...
CVE-2026-111885
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGro
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in...
CVE-2026-111890
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUse
phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site...
CVE-2026-111894
phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability that
phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user...
CVE-2026-111892
phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and use
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in...
CVE-2026-111891
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API,
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows...
CVE-2026-111888
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration...
CVE-2026-111887
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauth
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password...
CVE-2026-111884
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing...
CVE-2026-111889
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the...
CVE-2026-111886
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the removeTwofactorConfig() 2FA removal endpo
Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated...
CVE-2025-71435
Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access
Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order...
CVE-2026-110882
Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash...
CVE-2026-111880
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open...
CVE-2024-58398
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a...
CVE-2026-111881
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calcu
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-109701
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PAYCOMET PAYCOMET
Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5...
CVE-2026-110889
Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows R