A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is...
CVE-2026-100878
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.is
#cwe-285
共收录 628 条相关情报。
← 返回所有主题A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common...
CVE-2026-100878
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.is
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a...
CVE-2025-71426
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An att...
CVE-2025-71426
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not
A weakness has been identified in ningzichun student-management-system up to...
CVE-2026-97646
A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. T
A security vulnerability has been detected in ningzichun student-management-system up to...
CVE-2026-97647
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207c
A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function...
CVE-2026-97368
A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInf
ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass
CVE-2026-61604
Impact Type: Improper authorization leading to unauthorized movement of user funds. The x/bonds module moved funds
A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/...
CVE-2026-96882
该条目来自 NVD，披露编号 CVE-2026-96882，影响 TaleLin 开源的 lin-cms-spring-boot 项目 0.2.1 及更早版本。漏洞位于 src/main/java/io/github/talelin/lat
A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/Bo...
CVE-2026-96881
该漏洞影响 TaleLin lin-cms-spring-boot（基于 Spring Boot 的轻量级内容管理系统后端框架）0.2.1 及更早版本。问题位于 src/main/java/io/github/talelin/latticy
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookCon...
CVE-2026-96880
该条情报来自 NVD，披露的是开源项目 TaleLin lin-cms-spring-boot（一个基于 Spring Boot 的轻量级内容管理系统后端框架）中存在的越权访问（Improper Authorization）问题，影响版本为
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the...
CVE-2026-96762
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegmen
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of...
CVE-2026-96762
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegmen
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the ar...
CVE-2026-96556
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the fi
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-16346
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in ...
CVE-2026-16346
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs
CVE-2026-83805
### Impact This is an authorization bypass that escalates into unauthorized server-side job execution. 1. Primary impac
Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse create endpoint does not enforce approve...
CVE-2026-83805
Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkf
A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'theming_enabled*' (wit...
CVE-2026-95805
A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action t
Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission is enforced on selected output fields but not on GraphQL o...
CVE-2026-85055
Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission i