diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload
CVE-2026-82679
A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the
#cwe-284
共收录 1965 条相关情报。
← 返回所有主题@hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attackers to submit spoofed SecureBucket parent evidence during policy evaluation....
CVE-2026-82861
@hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attackers to submit spoof
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypass intended IAM boundary re...
CVE-2026-82859
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role p
@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OIDC trust policies. Attackers can use ForAnyValue:StringLik...
CVE-2026-82856
@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OID
@hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypass
CVE-2026-82861
@hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attackers to submit spoof
hulumi before v1.3.2 SCP Template Tag-on-Create Bypass
CVE-2026-82859
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role p
@hulumi/policies before 1.3.2 OIDC Trust Policy Bypass
CVE-2026-82856
@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OID
A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the fil...
CVE-2026-82629
A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affect
A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Dat...
CVE-2026-82624
A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality
WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user...
CVE-2026-40463
WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successfu
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The...
CVE-2026-82607
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the fu
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the file /wp-admin/admi...
CVE-2026-82607
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the fu
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes i...
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo
Linux Foundation Magma InitialUEMessage information disclosure
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo
A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation...
CVE-2026-82486
A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the compone
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77008
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does...
CVE-2026-76586
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77010
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation che
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount,...
CVE-2026-81026
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or s
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corres...
CVE-2026-81026
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or s