A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component ...

CVE-2026-17433

CVE-2026-17433 影响 nanocoai NanoClaw 至 2.0.64 版本。漏洞位于 MCP Server Approval 组件的 src/channels/chat-sdk-bridge.ts 文件中的 create

历史摘要 · 未重新核验 · NVD

OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check

### Summary When a SASL PLAIN bind supplies an authorization identity (authzid) that resolves to a **different** user, P

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)

### Summary The Budibase AI chat-link handoff flow (`GET/POST /api/chat-links/:instance/:token/handoff`) binds an **ext

历史摘要 · 未重新核验 · GitHub Advisory

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information...

CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · GitHub Advisory

Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate...

CVE-2026-56160

Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a netwo

历史摘要 · 未重新核验 · GitHub Advisory

Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

### Impact `next-auth` (Auth.js) v5 applications that gate access by checking only for the **existence** of the `auth`

历史摘要 · 未重新核验 · GitHub Advisory

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

CVE-2026-64642

## Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a **single** entry

历史摘要 · 未重新核验 · GitHub Advisory

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.5-12.2.15. Easily...

CVE-2026-62563

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Suppor

历史摘要 · 未重新核验 · NVD

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. ...

CVE-2026-62444

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).

历史摘要 · 未重新核验 · NVD

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact i...

CVE-2026-28312

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system adm

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/pag...

CVE-2026-16450

A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the

历史摘要 · 未重新核验 · NVD

Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax/lang.ajax.php path. This endpoint is protected only by `api_protec...

CVE-2026-34239

Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax/lang.ajax

历史摘要 · 未重新核验 · NVD

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32821

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32819

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32806

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and fram...

CVE-2026-32807

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dat

历史摘要 · 未重新核验 · NVD

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an authenticated attacker to execute arbitrary commands on the s...

CVE-2026-27823

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an auth

历史摘要 · 未重新核验 · NVD

SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge r...

CVE-2026-63752

SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. Th...

CVE-2026-16224

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

jxxghp MoviePilot Application API improper authorization

CVE-2026-16224

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the fil

历史摘要 · 未重新核验 · OSV.dev