JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108611
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler
#advisory
共收录 23075 条相关情报。
← 返回所有主题JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController...
CVE-2026-108606
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController...
CVE-2026-108605
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that al
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVE-2026-66563
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0...
CVE-2026-81797
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
CVE-2026-78529
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-66566
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn Workdir
CVE-2026-108595
Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_o
Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch
CVE-2026-108594
Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch tha
mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
CVE-2026-108592
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwra
InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool
CVE-2026-108591
InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create
1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter
CVE-2026-108586
1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticat
argocd-mcp through 0.9.0 Path Traversal via delete_application Tool
CVE-2026-108585
argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool tha
zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool
CVE-2026-108583
zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach int
GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store
CVE-2026-108582
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows
Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers
CVE-2026-108581
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileg
AniWorld Downloader before 5.3.0 WebUI Login Brute Force via /login
CVE-2026-108580
AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI
OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export
CVE-2026-108579
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed sp
PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Header
CVE-2026-108555
PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other
PDFMathTranslate through 1.9.11 SSRF via Gradio Web GUI Link Input
CVE-2026-108554
PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticate