共收录 1909 条相关情报。
← 返回所有主题CVE-2026-77425
Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:fea
CVE-2026-76910
Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:
CVE-2026-75101
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of
CVE-2026-88978
# Cross-tenant disclosure risk on `DurableTask` bidi RPC This is a low-severity, low-risk cross-tenant data exposure vu
CVE-2026-84298
## Summary The V1 `DurableTask` stream handler registers worker-supplied durable task external IDs in an in-memory call
CVE-2026-94462
## Summary The Store API v3 endpoint `PATCH /api/v3/store/carts/:id/associate` binds a guest cart to the authenticated
CVE-2026-83805
### Impact This is an authorization bypass that escalates into unauthorized server-side job execution. 1. Primary impac
CVE-2026-83805
Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkf
CVE-2026-94462
Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/st
CVE-2026-94462
Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/st
CVE-2026-95655
Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated use
CVE-2026-75517
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use
CVE-2026-75517
Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use
CVE-2026-95655
Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated use
CVE-2026-95683
In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrich
CVE-2026-95683
In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrich
CVE-2026-93556
The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, which specifies the account whose passwor
CVE-2026-18439
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Refere
CVE-2026-12995
The Custom Field Template plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,
CVE-2026-94536
lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing