Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.
CVE-2026-33823
Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.
#cwe-285
共收录 631 条相关情报。
← 返回所有主题Aegra has cross-user run injection in /threads/{thread_id}/runs (IDOR)
CVE-2026-44504
## Impact Aegra deployments running 0.9.0 through 0.9.6 with multiple authenticated users on a shared instance are vuln
Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic
CVE-2026-42609
### Summary A business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function...
CVE-2026-7782
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the fil
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Te...
CVE-2026-7782
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the fil
Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at ...
CVE-2026-41572
Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a pub
A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py...
CVE-2026-7713
A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the
A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpo...
CVE-2026-7709
A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_
A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function...
CVE-2026-7702
A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function allowDocPreview of the
A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function allowDocPreview of the file /workspace/:workspaceId/:docId of the component Pub...
CVE-2026-7702
A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function allowDocPreview of the
A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by...
CVE-2026-7681
A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an
A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/d...
CVE-2026-7681
A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper ...
CVE-2026-7644
该漏洞存在于 ChatGPTNextWeb NextChat 至 2.16.1 版本中，源自文件 app/mcp/actions.ts 内的 addMcpServer 函数。由于对用户输入或请求的授权验证不充分，攻击者无需身份验证即可远程利
A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipula...
CVE-2026-7631
该漏洞存在于 code-projects Online Hospital Management System 1.0 中的注册处理程序（Registration Handler）组件，具体位于一个未知函数中。攻击者可以通过远程方式操纵 'U
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...
CVE-2026-6449
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization i
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2. This is due t...
CVE-2026-6449
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization i
A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected...
CVE-2026-7502
A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected element is the function s
A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is...
CVE-2026-7510
A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionali
A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionality of the component Benchmark/Engagement/Product/Survey. ...
CVE-2026-7510
A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionali
A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper au...
CVE-2026-7505
A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the co