共收录 628 条相关情报。
← 返回所有主题CVE-2026-72907
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the add_ac function
CVE-2026-47663
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-19066
A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unk
CVE-2026-19064
A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affe
CVE-2026-18367
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS
The vulnerability allows any authenticated user to change their own password without providing the current password or h
CVE-2026-19006
A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tool
CVE-2026-18998
A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of
CVE-2026-18997
A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBg
CVE-2026-18992
A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function _select_tools of
CVE-2026-18818
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView o
CVE-2026-18720
CVE-2026-18720 影响 kalcaddle kodbox 1.67 Build 02 的 msgWarning 插件。该漏洞位于 /index.php?plugin/msgWarning/action 文件中的未知代码，攻击者通
CVE-2026-48115
Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 and later, but
CVE-2026-18631
A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig
CVE-2026-18631
A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig
CVE-2026-18584
A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impact
CVE-2026-67332
@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing
CVE-2026-67332
@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing