Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID
CVE-2026-109287
Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify
#cwe-639
共收录 1905 条相关情报。
← 返回所有主题jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by supplying depotId or depotIds reques...
CVE-2026-109180
jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unas
MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-disk files by supply...
CVE-2026-109177
MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files via POST /networkD...
CVE-2026-109176
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-disk files via POS...
CVE-2026-109175
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects' file attachments by supplyin...
CVE-2026-109168
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to
TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler that allows authenticated users to overwrite other users' f...
CVE-2026-109167
TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler th
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying a...
CVE-2026-109166
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to
TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via POST /user/form/item/batch/c...
CVE-2026-109165
TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fiel
TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form submissions by supplying arb...
CVE-2026-109164
TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration ...
CVE-2026-105411
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Secur...
CVE-2026-107427
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allo
The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated user such as a Subscriber to r...
CVE-2026-84167
The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it,
A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the caller's permissi...
CVE-2026-107193
A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and
A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employ...
CVE-2026-108797
A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of t
A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component Biometric Data Endpoint. Execut...
CVE-2026-108796
A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/fing
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in...
CVE-2026-108879
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability...
CVE-2026-108864
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows...
CVE-2026-108862
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that...
CVE-2026-108853
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-pri