共收录 1926 条相关情报。
← 返回所有主题CVE-2026-12393
The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requ
CVE-2026-11966
The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticate
CVE-2026-15159
The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up
CVE-2026-62233
grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints
CVE-2026-62233
grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints
CVE-2026-62233
grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints
CVE-2026-43977
wger is a free, open-source workout and fitness manager. In versions prior to 2.6, any authenticated user can read anoth
CVE-2026-43977
wger is a free, open-source workout and fitness manager. In versions prior to 2.6, any authenticated user can read anoth
CVE-2026-11889
SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation at
CVE-2026-11889
SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation at
CVE-2026-52869
### Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing
CVE-2026-53536
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endp
CVE-2026-53536
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endp
CVE-2026-15945
A flaw was found in the group search functionality of the Keycloak server's administrative API. When Fine-Grained Admin
CVE-2026-57205
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions
CVE-2026-54568
Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a c
CVE-2026-54568
Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a c
CVE-2026-59237
Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST API controllers in Roskus Pro
CVE-2026-59237
Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST API controllers in Roskus Pro
CVE-2025-71388
stoatchat (delta/Revolt) versions from 20241213-1 before 20250210-1 allow users with only ViewChannel (read) permission