共收录 1981 条相关情报。
← 返回所有主题CVE-2026-18993
A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functiona
CVE-2026-18974
A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the
CVE-2026-18969
A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is
CVE-2025-63822
SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate
CVE-2026-10547
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id
CVE-2026-70430
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as pa
CVE-2026-20304
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering t
CVE-2026-20267
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering t
CVE-2026-70481
## Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the
CVE-2026-70476
### Summary Several organization billing endpoints accept attacker-controlled Stripe identifiers (subscriptionId) withou
CVE-2026-59912
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnera
CVE-2026-59912
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnera
CVE-2026-15430
Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192,
CVE-2026-56608
HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular acce
CVE-2026-16563
The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when return
CVE-2026-45377
Decidim 是一个开源参与式民主框架，用于城市或组织的公民参与流程。其数据下载功能（download_your_data）存在一个身份验证绕过漏洞（CVE-2026-45377）。在受影响的版本（0.30.9 之前，0.31.0 至 0
CVE-2026-65311
The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoi
CVE-2026-14834
The Mailgun for WordPress plugin before 2.2.1 does not perform any capability or nonce check on an unauthenticated AJAX
CVE-2026-58039
A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-wr
CVE-2026-62246
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane dat