共收录 2028 条相关情报。
← 返回所有主题CVE-2026-7673
CVE-2026-7673 影响 CRMEB Java 版本至 1.3.4，涉及 Admin Upload 组件中的 UploadServiceImpl.java 文件。攻击者在已登录且具备管理员权限（CVSS 权限要求为高）的情况下，可通
CVE-2026-37526
AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision comman
CVE-2026-37526
AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision comman
CVE-2026-7578
A weakness has been identified in MacCMS Pro up to 2022.1.3. This vulnerability affects the function install of the file
CVE-2026-2311
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI
CVE-2026-2311
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI
CVE-2026-40904
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c
CVE-2026-40603
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c
CVE-2026-40595
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c
CVE-2026-7468
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the
CVE-2026-7393
A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file
CVE-2026-5141
Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM S
CVE-2025-9772
A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Perfor
CVE-2026-32699
### Summary The application fails to validate the ```nick``` parameter during a ```POST``` request to the ```EditUser```
CVE-2026-5780
An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/miner
CVE-2026-5779
An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/u
CVE-2026-40966
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histo
CVE-2026-7238
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PH
CVE-2026-7238
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PH
CVE-2026-40966
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histo