JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...
CVE-2026-108873
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
#advisory
共收录 23075 条相关情报。
← 返回所有主题JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...
CVE-2026-108869
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...
CVE-2026-108875
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows...
CVE-2026-108865
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt
Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that...
CVE-2026-108858
Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied a
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows...
CVE-2026-108860
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to f
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability...
CVE-2026-108864
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated
Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP...
CVE-2026-108861
Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the fiel
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController...
CVE-2026-108867
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById han
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element...
CVE-2026-108683
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP...
CVE-2026-108859
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote una
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated...
CVE-2026-108866
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any accou
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function...
CVE-2026-108684
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows...
CVE-2026-108862
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows...
CVE-2026-108863
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attack
A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the...
CVE-2026-108682
A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /
Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability...
CVE-2026-108857
Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configu
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that...
CVE-2026-108853
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-pri
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-108852
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108855
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user t