YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in...
CVE-2026-116208
YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts tha
#advisory
共收录 23093 条相关情报。
← 返回所有主题A security vulnerability has been detected in SH3. This affects an unknown function of the...
CVE-2026-116054
A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that...
CVE-2026-116205
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action ...
CVE-2026-116204
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/de
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where...
CVE-2026-116211
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche fiel
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags...
CVE-2026-116203
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacke
Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController:...
CVE-2026-116199
Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to...
CVE-2026-116201
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low...
CVE-2026-116202
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(),...
CVE-2026-116200
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry...
CVE-2026-116197
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller
Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the...
CVE-2026-116194
Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost O
Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav...
CVE-2026-116193
Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticat
rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV...
CVE-2026-116190
rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards
Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store...
CVE-2026-116198
Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext i
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate...
CVE-2026-116189
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums fro
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows...
CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attacker
Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks...
CVE-2026-116196
Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authori
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows...
CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to wr
Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink...
CVE-2026-116195
Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims