共收录 1909 条相关情报。
← 返回所有主题CVE-2026-61688
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API reques
CVE-2026-61688
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API reques
CVE-2026-17627
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and in
CVE-2026-85693
Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers
CVE-2026-85624
Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that perform
CVE-2026-85607
Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.up
CVE-2026-85624
Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that perform
CVE-2026-85607
Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.up
CVE-2026-85617
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allow
CVE-2026-85616
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when
CVE-2026-85615
Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the report.getLayouts and report.re
CVE-2026-85611
OpenPanel before 2.3.0 contains a cross-tenant broken object level authorization vulnerability in the report.getLayouts
CVE-2026-85594
Traefik versions from v3.7.1 fail to enforce crossProviderNamespaces restrictions on the traefik.ingress.kubernetes.io/s
CVE-2026-85579
SiYuan is affected by an information disclosure vulnerability (confirmed in v3.8.1, fixed in v3.8.2) in the reader-acces
CVE-2026-85617
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allow
CVE-2026-85616
Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when
CVE-2026-85594
Traefik versions from v3.7.1 fail to enforce crossProviderNamespaces restrictions on the traefik.ingress.kubernetes.io/s
CVE-2026-85579
SiYuan is affected by an information disclosure vulnerability (confirmed in v3.8.1, fixed in v3.8.2) in the reader-acces
CVE-2026-27432
Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorre
CVE-2026-79630
The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump i