Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-108302
Tanium addressed an improper access controls vulnerability in Comply.
#CVE
共收录 67791 条相关情报。
← 返回所有主题Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-108301
Tanium addressed an improper access controls vulnerability in Comply.
An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the ...
CVE-2026-102816
An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthent
An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback ...
CVE-2026-102815
An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service run
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated at...
CVE-2026-102814
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local ne...
CVE-2026-102813
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interfac
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vecto...
CVE-2026-102812
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and A
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker c...
CVE-2026-87897
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentic
The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.
CVE-2026-82986
The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a
When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoi...
CVE-2026-82984
When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("Yo
The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returnin...
CVE-2026-82983
The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user
A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.
CVE-2026-77173
A user could create a docx or odt file with a # in the filename with confidential information such as a credit card numb
App passwords were allowed to bypass password confirmation on sensitive endpoints.
CVE-2026-77172
App passwords were allowed to bypass password confirmation on sensitive endpoints.
A public shared collective always allowed recipients of the link to create pages.
CVE-2026-77171
A public shared collective always allowed recipients of the link to create pages.
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cle...
CVE-2026-77167
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. Th
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.
CVE-2026-67400
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or g
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a s...
CVE-2026-57201
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` heap buffer overflow using c...
CVE-2026-57198
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...
CVE-2026-57197
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...
CVE-2026-57194
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2