共收录 812 条相关情报。
← 返回所有主题CVE-2026-56245
Supabase Capgo before 12.128.2 contains an authorization bypass vulnerability in the SECURITY DEFINER record_build_time
CVE-2026-54319
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.1
CVE-2026-54099
A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR au
CVE-2026-8157
The Vitepos WordPress plugin before 3.4.2 does not properly restrict the roles that can be assigned when creating new u
CVE-2026-56239
Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY
CVE-2026-56239
Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY
CVE-2026-56216
Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functions/v1/apikey endpoint that allows ap
CVE-2026-56212
Capgo before 12.128.2 contains an authentication logic flaw: a user with permission to manage team or organization secur
CVE-2026-56216
CVE-2026-56216 是 Capgo 产品在 12.128.2 之前版本中存在的一个作用域升级漏洞。漏洞位于 POST /functions/v1/apikey 端点，攻击者通过操纵该端点，可利用一个已受限于特定应用（app-lim
CVE-2026-56212
Capgo 在 12.128.2 之前版本中存在身份验证逻辑缺陷：拥有管理团队或组织安全设置权限的用户可以强制所有团队成员启用双因素身份验证，而无需先在自己的账户上启用双因素身份验证。应用程序在进行策略更改前未能验证发起者的双因素身份验证状
CVE-2026-53862
### Summary Bootstrap token replay could widen pending pairing scopes. In affected versions, a caller with access to a
CVE-2026-53855
### Summary Shell positional parameters could weaken strict inline-eval checks. In affected versions, a command request
CVE-2026-54319
## Summary A sandbox volume reference (`volumeId`, which may also be a volume name) was forwarded to the runner and used
CVE-2026-50201
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
CVE-2026-20246
A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to e
CVE-2026-54415
Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all pla
CVE-2024-38487
api-gateway container running with root privilege would allow an attacker to escape the container and access host system
CVE-2026-12313
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Fi
CVE-2026-12289
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.
CVE-2026-8176
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Esca