共收录 63886 条相关情报。
← 返回所有主题CVE-2026-115973
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword
CVE-2026-115972
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function
CVE-2026-115970
A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat
CVE-2026-115969
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the com
CVE-2026-115933
Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a t
CVE-2026-115557
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without ce
CVE-2026-114629
Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body para
CVE-2026-115932
When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it do
CVE-2026-116020
BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authentic
CVE-2026-116018
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
CVE-2026-116017
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo
CVE-2026-116016
yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-
CVE-2026-116014
open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bi
CVE-2026-116013
OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n
CVE-2026-116012
Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining
CVE-2026-116010
RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write reco
CVE-2026-116009
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to wr
CVE-2026-116008
DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allo
CVE-2026-115998
IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept
CVE-2026-115994
BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targ