共收录 1905 条相关情报。
← 返回所有主题CVE-2026-76216
## Summary Vikunja's `web.Auth` interface (`pkg/web/web.go`, single method `GetID() int64`) is satisfied by BOTH `*user.
CVE-2026-68582
## Summary The task-collection endpoint `GET /api/v1/projects/{project}/views/{view}/tasks` loads the requested project
CVE-2026-108110
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent
CVE-2026-108096
Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Cat
CVE-2026-108096
Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Cat
CVE-2026-108110
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent
CVE-2026-108110
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent
CVE-2026-78026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through
CVE-2026-78023
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through
CVE-2026-87108
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated w
CVE-2026-87108
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated w
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil
CVE-2026-107793
Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that al
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil
CVE-2026-107793
Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that al
CVE-2026-107793
Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that al
CVE-2026-107445
A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when acces
CVE-2026-107444
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l
CVE-2026-107445
A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when acces
CVE-2026-107444
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l