共收录 1926 条相关情报。
← 返回所有主题CVE-2026-48765
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspa
CVE-2026-69119
Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any aut
CVE-2026-69117
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only
CVE-2026-48494
TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resum
CVE-2026-58650
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a secur
CVE-2026-47704
TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can
CVE-2026-73068
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI
CVE-2026-56721
CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference
CVE-2026-72774
n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenti
CVE-2026-72763
n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for
CVE-2026-72547
An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event org
CVE-2026-72546
An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event org
CVE-2026-72545
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote
CVE-2026-72543
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote
CVE-2026-72540
An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid prev
CVE-2026-19424
Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated rem
CVE-2026-66764
Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated user
CVE-2026-18620
A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerab
CVE-2026-68872
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team
CVE-2026-68870
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Va