FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reported previously, the ...

CVE-2026-48810

FreeScout 是一个基于 PHP Laravel 框架的免费帮助台和共享收件箱系统。在版本 1.8.221 之前，其 ThreadPolicy::edit 方法存在权限检查缺失漏洞。具体来说，当用户拥有 PERM_EDIT_CONVE

历史摘要 · 未重新核验 · NVD

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects in the team settings allowed any authenticated panel user to take over the RBAC ...

CVE-2026-47744

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects in the team settings al

历史摘要 · 未重新核验 · NVD

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin Order detail and Order shipments table were callable by an authenticated low...

CVE-2026-47740

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin Order detail and Or

历史摘要 · 未重新核验 · NVD

A vulnerability was found in macrozheng mall up to 1.0.3. This affects an unknown function of the file /admin/update/ of the component Super Admin Password Handler. Performing a...

CVE-2026-10070

A vulnerability was found in macrozheng mall up to 1.0.3. This affects an unknown function of the file /admin/update/ of

历史摘要 · 未重新核验 · NVD

WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or admin gate. It only has an entry guard: preg_match('/^@/...

CVE-2026-45620

WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or

历史摘要 · 未重新核验 · NVD

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, an approved mobile device token crea...

CVE-2026-47713

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti

历史摘要 · 未重新核验 · NVD

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify that the Authorization header v...

CVE-2026-47673

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk

历史摘要 · 未重新核验 · NVD

IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.

CVE-2026-6938

IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with

历史摘要 · 未重新核验 · NVD

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7,...

CVE-2025-43289

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macO

历史摘要 · 未重新核验 · GitHub Advisory

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access sensiti...

CVE-2025-43289

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macO

历史摘要 · 未重新核验 · NVD

e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how ...

CVE-2026-46620

e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on c

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClass...

CVE-2026-9484

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · NVD

A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the file grades.php. Performing a manipulation of the argume...

CVE-2026-9483

A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the

历史摘要 · 未重新核验 · NVD

NocoDB: Shared-base link access can invite arbitrary users as persistent base members

CVE-2026-46552

### Summary Shared-base sessions were granted the same base-member capabilities as authenticated viewers. Using only th

历史摘要 · 未重新核验 · GitHub Advisory

SpiceDB: Caveat structures with nested lists can result in improper cache reuse

CVE-2026-46668

### Impact Users are impacted if: - They have a caveat structure with a nested list, e.g.: ```zed caveat shape(x l

历史摘要 · 未重新核验 · GitHub Advisory

Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fi...

CVE-2026-45187

Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users

历史摘要 · 未重新核验 · NVD

shopper/framework: Authorization bypass in multiple Livewire admin components

## Impact Multiple Livewire components in the admin panel allowed an authenticated low-privilege user to mutate data wi

历史摘要 · 未重新核验 · GitHub Advisory

eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage

### Impact For deployments using MySQL or MariaDB = 11.6.2 the default is ON, which is not affected - Same rules applie

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the...

CVE-2026-8786

A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseFo

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseForInitialization of the file internal/handler/initializati...

CVE-2026-8786

A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseFo

历史摘要 · 未重新核验 · NVD