A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the compo...

CVE-2026-16217

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknow

历史摘要 · 未重新核验 · NVD

guohongze adminset Delivery Deployment Endpoint deli.py authorization

CVE-2026-16217

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknow

历史摘要 · 未重新核验 · OSV.dev

A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module. Such m...

CVE-2026-16214

A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/das

历史摘要 · 未重新核验 · NVD

geex-arts django-jet Dashboard views.py authorization

CVE-2026-16214

A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/das

历史摘要 · 未重新核验 · OSV.dev

tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.33.0, tarteaucitron.cookie.purge() is called on any element with the purgeBtn class and does not check w...

CVE-2026-49977

tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.33.0, tarteaucitron.cookie.purge() is called on

历史摘要 · 未重新核验 · NVD

ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization

About 14 HTTP handlers resolve the {database} path param and call getDatabase(...) WITHOUT user.canAccessToDatabase(...)

历史摘要 · 未重新核验 · GitHub Advisory

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6.12, the BunkerWeb web UI BiscuitMiddleware authorization bypass list include...

CVE-2026-61718

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6.12, the BunkerWeb w

历史摘要 · 未重新核验 · NVD

bunkerweb: Read-only Web UI users can delete job cache files due to missing authorization on /cache/ routes

CVE-2026-61718

bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6.12, the BunkerWeb w

历史摘要 · 未重新核验 · OSV.dev

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to...

CVE-2026-15909

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is a

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is an unknown function of the file proses/add.php. The manipu...

CVE-2026-15909

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is a

历史摘要 · 未重新核验 · NVD

Better Auth is an authentication and authorization library for TypeScript. From 1.2.10 until 1.6.11, the @better-auth/sso plugin's POST /sso/register endpoint lets any organizat...

CVE-2026-53515

Better Auth is an authentication and authorization library for TypeScript. From 1.2.10 until 1.6.11, the @better-auth/ss

历史摘要 · 未重新核验 · NVD

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authenticated session as the owner ...

CVE-2026-45337

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorizat

历史摘要 · 未重新核验 · NVD

Better Auth: Device authorization approve and deny accept any authenticated session while the user code is pending

CVE-2026-45337

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorizat

历史摘要 · 未重新核验 · OSV.dev

Better Auth: Privilege escalation via SSO provider registration: missing admin role check in @better-auth/sso

CVE-2026-53515

Better Auth is an authentication and authorization library for TypeScript. From 1.2.10 until 1.6.11, the @better-auth/ss

历史摘要 · 未重新核验 · OSV.dev

SurrealDB is a scalable, distributed, collaborative, document-graph database for the realtime web. Prior to 3.1.0, Document::purge_edges in surrealdb/core/src/doc/delete.rs auto...

CVE-2026-49997

SurrealDB is a scalable, distributed, collaborative, document-graph database for the realtime web. Prior to 3.1.0, Docum

历史摘要 · 未重新核验 · NVD

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-58540

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-58277

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network

历史摘要 · 未重新核验 · NVD

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-54121

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privile

历史摘要 · 未重新核验 · NVD

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-50346

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-50344

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD