ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service
CVE-2026-105206
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, whi
#advisory
共收录 23210 条相关情报。
← 返回所有主题SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator...
CVE-2026-97307
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculato
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is...
CVE-2026-105145
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environ
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected...
CVE-2026-105146
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the fu
A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function...
CVE-2026-105144
A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-103355
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file...
CVE-2026-105137
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of th
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is...
CVE-2026-105141
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored...
CVE-2026-97332
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite in
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-97276
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Stat
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-103344
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-103354
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-103062
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Transla
The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly...
CVE-2026-86817
The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to
topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials
CVE-2026-105141
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_
ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows...
CVE-2026-105131
ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows attackers holding an API toke
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown...
CVE-2026-105097
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /custo
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown...
CVE-2026-105096
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /custo
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated...
CVE-2026-105125
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON fi