共收录 63886 条相关情报。
← 返回所有主题CVE-2026-116280
A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the f
CVE-2026-116274
A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderContro
CVE-2026-116219
Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets
CVE-2026-116218
Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inj
CVE-2026-116216
MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unau
CVE-2026-116215
MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated m
CVE-2026-116214
MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers t
CVE-2026-116212
Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows auth
CVE-2026-116210
Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remot
CVE-2026-115700
Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent
CVE-2026-115693
Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonat
CVE-2026-113440
Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain t
CVE-2026-110475
This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization con
CVE-2026-110474
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the
CVE-2026-110314
Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit all
CVE-2026-107092
NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.
CVE-2026-116263
A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the f
CVE-2026-116261
A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc_file_open of th
CVE-2026-116260
A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the f
CVE-2026-115717
Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API end