共收录 58490 条相关情报。
← 返回所有主题CVE-2026-119654
DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate p
CVE-2026-119653
Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list
CVE-2026-119652
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that
CVE-2026-119651
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allo
CVE-2026-119650
HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows au
CVE-2026-119649
Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolder
CVE-2026-119648
Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated
CVE-2026-119647
RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept t
CVE-2026-119646
Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other s
CVE-2026-119645
ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated us
CVE-2026-119644
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to mo
CVE-2026-119482
Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured
CVE-2026-119370
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell
CVE-2026-119368
Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting
CVE-2026-117349
Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
CVE-2026-117346
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit
CVE-2026-116860
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Contr
CVE-2026-112905
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version
CVE-2026-111487
An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.
CVE-2026-110799
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version