crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-111354
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other me
#cwe-639
共收录 1905 条相关情报。
← 返回所有主题cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non...
CVE-2026-111365
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any...
CVE-2026-111345
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private
metasfresh through 5.175 contains a missing record-level authorization vulnerability in...
CVE-2026-111351
metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment...
CVE-2026-111346
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale...
CVE-2026-111348
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.ph
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows...
CVE-2026-111344
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router...
CVE-2026-111331
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authentica
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows...
CVE-2026-111324
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwri
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. Prior to 3.0.3...
CVE-2026-54683
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-110853
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow i
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create...
CVE-2026-110851
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint,...
CVE-2026-110841
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run ide
In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required...
CVE-2026-102298
In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenti
Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that...
CVE-2026-110775
Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users
Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that...
CVE-2026-110774
Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated use
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication...
CVE-2026-97657
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encrypt
The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary...
CVE-2026-107652
The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions
Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows...
CVE-2026-15468
Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalati
Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approva...
CVE-2026-104875
Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emerge