共收录 1909 条相关情报。
← 返回所有主题CVE-2026-86720
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live_restreams_id in
CVE-2026-73320
XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attac
CVE-2026-81802
Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.
CVE-2026-86488
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved se
CVE-2026-86481
In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons
CVE-2026-86489
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders a
CVE-2026-86489
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders a
CVE-2026-86488
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved se
CVE-2026-86481
In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons
CVE-2026-86451
Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool:
CVE-2026-86408
Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKe
CVE-2026-4945
The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insec
CVE-2026-86451
Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool:
CVE-2026-86408
Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKe
CVE-2026-86277
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted
CVE-2026-16310
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi
CVE-2026-16310
CVE-2026-16310 是 WordPress 的 MemberDash 插件（版本至 1.8.5）中存在的一个不安全直接对象引用（IDOR）漏洞。该漏洞源于通过 'id' 参数对用户控制的键缺少有效性验证，导致未经认证的攻击者能够在
CVE-2026-86192
SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys end
CVE-2026-86191
SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the getAttributeViewKeysByID endpoint t
CVE-2026-86192
SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys end