Craft CMS before 5.10.11 Broken Access Control via element-indexes
CVE-2026-84792
Craft CMS versions before 5.10.11 contain a broken access control vulnerability in the element-indexes/save-elements end
#advisory
共收录 23717 条相关情报。
← 返回所有主题CVE-2026-82958
CVE-2026-82958
In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a Cr
CVE-2026-84175
CVE-2026-84175
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs
【腾讯云认证】腾讯云公有云交付工程师 - 上云迁移认证升级公告
【腾讯云认证】腾讯云公有云交付工程师 - 上云迁移认证升级公告
【腾讯云认证】腾讯云大数据工程师认证升级公告
【腾讯云认证】腾讯云大数据工程师认证升级公告
A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This...
CVE-2026-84442
A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the functio
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some...
CVE-2026-84441
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality
The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-14982
The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts...
CVE-2026-14957
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not N
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without...
CVE-2026-84485
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing
FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController...
CVE-2026-84715
FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allow
A vulnerability was detected in AirAsia MOVE App up to 12.47.1 on Android. This issue affects the...
CVE-2026-84431
A vulnerability was detected in AirAsia MOVE App up to 12.47.1 on Android. This issue affects the function com.airasia.c
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local...
CVE-2026-84699
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset
NocoBase fails to sanitize rich text field values in the read renderer, allowing users with...
CVE-2026-84701
NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store
A flaw was found in the first-broker-login flow of the Keycloak identity management service. When...
CVE-2026-82968
A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown...
CVE-2026-84437
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/c
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129...
CVE-2026-84697
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614
PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a...
CVE-2026-84698
PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number
A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of...
CVE-2026-84438
A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/control
PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the...
CVE-2026-84700
PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000