mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController...
CVE-2026-102365
mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController that retrieve customer a
#advisory
共收录 23212 条相关情报。
← 返回所有主题mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront...
CVE-2026-102364
mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authentica
mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController...
CVE-2026-102363
mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that
A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of...
CVE-2026-101264
A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork
A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown...
CVE-2026-101263
A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQ
A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an...
CVE-2026-101265
A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the c
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd...
CVE-2026-102361
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unaut
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown...
CVE-2026-101262
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/Z
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing...
CVE-2026-102334
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers t
A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted...
CVE-2026-101277
A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the functio
Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators,...
CVE-2026-102335
Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin use
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive...
CVE-2026-102332
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log
httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as...
CVE-2026-102333
httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in...
CVE-2026-102362
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Un
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file ...
CVE-2026-101261
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetup_
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some...
CVE-2026-101260
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the
ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController...
CVE-2026-102297
ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenti
ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp:...
CVE-2026-102296
ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow m
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue...
CVE-2026-101188
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that...
CVE-2026-101093
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to de