1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows...
CVE-2026-108700
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list
#advisory
共收录 23075 条相关情报。
← 返回所有主题mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated...
CVE-2026-108690
mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other sh
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated...
CVE-2026-108691
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to de
1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in...
CVE-2026-108692
1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldControll
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows...
CVE-2026-108689
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write in
Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController...
CVE-2026-108688
Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108673
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108671
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP se
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108676
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles ha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108675
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController...
CVE-2026-108674
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api...
CVE-2026-108677
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-pri
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles...
CVE-2026-108678
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108680
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement...
CVE-2026-108679
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment...
CVE-2026-108670
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch...
CVE-2026-108669
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeC
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords...
CVE-2026-108672
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGeneration
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-104841
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...
CVE-2026-108667
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to