共收录 69535 条相关情报。
← 返回所有主题CVE-2026-112238
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the w
CVE-2026-112237
The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method,
CVE-2026-112071
The order cancellation function accepts an order identifier from the request and acts on that order without checking tha
CVE-2026-112070
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widge
CVE-2026-112069
The extension no longer applied its access protection to files in file storages that use a non-default relative base pat
CVE-2026-112068
The backend module does not check whether a backend user has access to the requested site. Users with access to the modu
CVE-2026-112067
The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can reque
CVE-2026-112066
The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend us
CVE-2026-112065
The routes that provide consent history and statistics data did not check whether the backend user had access to the mod
CVE-2026-112064
The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and u
CVE-2026-111844
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy
CVE-2026-92287
Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This
CVE-2026-43848
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the servic
CVE-2026-43847
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without re
CVE-2026-43846
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve
CVE-2026-43845
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CVE-2026-43844
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
CVE-2026-43843
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the se
CVE-2026-43842
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash
CVE-2026-43841
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash