A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an...
CVE-2026-14736
A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file
#cwe-284
共收录 2028 条相关情报。
← 返回所有主题A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the ar...
CVE-2026-14736
A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and...
CVE-2026-14698
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. I
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file upload_files.p...
CVE-2026-14698
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. I
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the...
CVE-2025-71380
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n ru
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials...
CVE-2025-71380
此漏洞存在于 n8n 自动化平台的“Execute Command”节点中。n8n 是一个工作流自动化工具，允许用户通过图形界面构建集成流程。该节点本意是让有权限的用户在主机上执行命令，但未对命令执行进行充分的权限控制或沙箱隔离。任何拥有
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a...
CVE-2026-58523
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-58523
该漏洞存在于 Microsoft Edge for Android 中，属于不当的访问控制缺陷。攻击者无需身份验证，通过网络即可利用该漏洞，绕过安全功能（例如可能绕过同源策略或权限检查）。CVSS 3.1 评分为 6.5（中危），攻击向量为
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58286
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58282
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting...
CVE-2026-27779
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing sp
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly...
CVE-2026-26247
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowi
Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the...
CVE-2026-27660
Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permissio
Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror...
CVE-2026-26292
Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing
Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.
CVE-2026-20909
Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull...
CVE-2026-24690
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches.
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs...
CVE-2026-25712
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and
Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts
CVE-2026-58422
Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts
Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service
CVE-2026-58421
Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-58286
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne