共收录 1926 条相关情报。
← 返回所有主题CVE-2026-16450
A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the
CVE-2026-14184
The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of
CVE-2026-14183
The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt han
CVE-2026-57494
AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-p
CVE-2026-55544
NextCRM is open-source customer relationship management (CRM) software. In version 0.12.1, the MCP campaign tools expose
CVE-2026-61836
## Summary When response caching is enabled (`CACHE_ENABLED=true`), the cache-key derivation in `api/src/utils/get-cach
CVE-2026-13381
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/fil
CVE-2026-47198
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the
CVE-2026-47130
NextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 have a Broken Object Le
CVE-2026-44585
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the
CVE-2026-13381
VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/fil
CVE-2026-45295
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tr
CVE-2026-45295
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tr
CVE-2026-63763
SurrealDB before 2.5.0 and before 3.0.0-beta.3 contains a confused deputy privilege escalation vulnerability. Unprivileg
CVE-2026-63745
SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability where authenticated users can spoof compos
CVE-2026-63735
SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticat
CVE-2026-63763
SurrealDB before 2.5.0 and before 3.0.0-beta.3 contains a confused deputy privilege escalation vulnerability. Unprivileg
CVE-2026-16217
A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknow
CVE-2026-16217
A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknow
CVE-2026-16214
A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/das