共收录 1962 条相关情报。
← 返回所有主题CVE-2026-118578
A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown
CVE-2026-118662
Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate se
CVE-2026-106484
Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker
CVE-2026-67073
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an
CVE-2026-115255
The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions, a
CVE-2026-106003
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce valida
CVE-2026-103382
The Casso Flow WordPress plugin before 4.2.0 does not properly authenticate incoming bank-transfer payment notification
CVE-2026-118337
Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin
CVE-2026-118318
Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a cra
CVE-2026-118337
Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin
CVE-2026-118318
Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a cra
CVE-2026-82986
The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a
CVE-2026-82984
When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("Yo
CVE-2026-77173
A user could create a docx or odt file with a # in the filename with confidential information such as a credit card numb
CVE-2026-77171
A public shared collective always allowed recipients of the link to create pages.
CVE-2026-67400
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or g
CVE-2026-117512
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee
CVE-2026-117512
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee
CVE-2026-92375
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to versio
CVE-2026-90730
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7