共收录 1905 条相关情报。
← 返回所有主题CVE-2026-112240
The download link for files uploaded through a form relied on a token that could be predicted. The file name in the requ
CVE-2026-112068
The backend module does not check whether a backend user has access to the requested site. Users with access to the modu
CVE-2026-77935
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenti
CVE-2026-77937
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users
CVE-2026-77937
Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users
CVE-2026-77935
Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenti
CVE-2026-107366
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe
CVE-2026-107366
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe
CVE-2026-111912
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic()
CVE-2026-111908
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability
CVE-2026-111905
phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability
CVE-2026-111902
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that t
CVE-2026-61726
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, St
CVE-2026-111368
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission r
CVE-2026-111366
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to
CVE-2026-111363
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-pri
CVE-2026-111355
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to igno
CVE-2026-111364
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that
CVE-2026-111358
SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated worksp
CVE-2026-111359
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefron