Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory:...
CVE-2026-114660
Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that
#advisory
共收录 22948 条相关情报。
← 返回所有主题Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX...
CVE-2026-114636
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT
Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the...
CVE-2026-114658
Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that
Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic...
CVE-2026-114659
Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/p
CVE-2026-114728
CVE-2026-114728
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling o
oretnom23 php-travel-agency-system Insertion insert.php sql injection
CVE-2026-114577
A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file adm
CVE-2026-114727
CVE-2026-114727
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing
CVE-2026-114726
CVE-2026-114726
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc
CVE-2026-114725
CVE-2026-114725
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
CVE-2026-114724
CVE-2026-114724
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial
CVE-2026-114723
CVE-2026-114723
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum
Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments
CVE-2026-114663
Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, beca
Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher
CVE-2026-114656
Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to
Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper
CVE-2026-114642
Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connect
Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper
CVE-2026-114641
Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend a
Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router
CVE-2026-114640
Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provi
Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool
CVE-2026-114639
Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthe
Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision
CVE-2026-114638
Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider
Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak
CVE-2026-114637
Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connect
Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router
CVE-2026-114636
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT