共收录 628 条相关情报。
← 返回所有主题CVE-2026-105382
A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This a
CVE-2026-104955
Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request
CVE-2026-104955
Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request
CVE-2026-105284
A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC
CVE-2026-105171
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03
CVE-2026-105171
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03
CVE-2026-105097
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /custo
CVE-2026-105096
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /custo
CVE-2026-105097
CVE-2026-105097 是一枚被分配在 Omega Solution 旗下产品 CoinEx Crypto 2025 中的授权绕过（Authorization Bypass）漏洞。根据 NVD 描述，问题位于组件 Customer
CVE-2026-105096
CVE-2026-105096 是 NVD 收录的一则授权绕过漏洞，影响 Omega Solution 开发的 CoinEx Crypto 2025 产品。漏洞位于该产品 Customer Profile API（客户资料接口）的 /cus
CVE-2026-105121
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy se
CVE-2026-105119
OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is
CVE-2026-105121
OpenAM 16.1.3 之前版本存在不当授权（授权校验逻辑缺陷）问题。核心成因在于：系统在判断“销毁其他用户会话”这一高权限操作是否越过 realm 边界时，比对的是【发起请求者自身所属 realm】与目标 realm，而不是【被销毁的
CVE-2026-105119
OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is
CVE-2026-105121
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy se
CVE-2026-105119
OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is
CVE-2026-71886
In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or tr
CVE-2026-71886
In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or tr
CVE-2026-71886
In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or tr
CVE-2026-104910
MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of even