共收录 1965 条相关情报。
← 返回所有主题CVE-2026-84651
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration d
CVE-2026-84804
Kimai before 2.65.0 fails to properly validate permissions when removing team access to activities, projects, and custom
CVE-2026-84804
Kimai before 2.65.0 fails to properly validate permissions when removing team access to activities, projects, and custom
CVE-2026-73762
A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing
CVE-2026-73750
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenti
CVE-2026-73749
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unaut
CVE-2026-73741
A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to
CVE-2026-73727
Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to
CVE-2026-52111
An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration
CVE-2024-7953
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administra
CVE-2026-51956
A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user fr
CVE-2026-51766
Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack
CVE-2026-51761
Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke
CVE-2026-51756
Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta
CVE-2026-51752
Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta
CVE-2026-51748
Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthentica
CVE-2026-84128
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
CVE-2026-84117
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-53682
An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receiv
CVE-2026-51745
Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at