共收录 1905 条相关情报。
← 返回所有主题CVE-2026-120200
Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate,
CVE-2026-120199
LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated u
CVE-2026-63401
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and `removeAc
CVE-2026-63338
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica
CVE-2026-116672
## Description ### Summary RFC 7592 (OAuth 2.0 Dynamic Client Registration Management Protocol) lets a previously regi
CVE-2026-62277
LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, `Print
CVE-2026-62991
Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/customers/{user}/show`
CVE-2026-119329
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used
CVE-2026-116239
In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an
CVE-2026-120007
NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act
CVE-2026-107868
Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions.
CVE-2026-97638
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D
CVE-2026-55551
ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id
CVE-2026-119708
abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name
CVE-2026-61708
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,
CVE-2026-119664
Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsM
CVE-2026-119663
Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connect
CVE-2026-119661
ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that
CVE-2026-119659
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other us
CVE-2026-119658
PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role acco