共收录 1947 条相关情报。
← 返回所有主题CVE-2026-47713
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti
CVE-2026-45342
LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, LinkAce contains an Insecure Direct Object Re
CVE-2026-9241
该漏洞存在于WordPress插件FOX – Currency Switcher Professional for WooCommerce的所有版本直至1.4.6中。问题出在`classes/fixed/fixed_user_role.ph
CVE-2026-9228
The Timetable and Event Schedule by MotoPress 插件（WordPress）在所有版本（包括 2.4.16）中，通过 action_get_event_data 存在不安全的直接对象引用（IDOR）
CVE-2026-46544
Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro
CVE-2026-46414
Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro
CVE-2026-4868
GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 1
CVE-2026-4868
GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 1
CVE-2026-9712
When creating an export through the pretix API, API clients are returned an UUID value for their export job (a long, ra
CVE-2026-9712
When creating an export through the pretix API, API clients are returned an UUID value for their export job (a long, ra
CVE-2026-42736
Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows
CVE-2026-42725
Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout
CVE-2026-8890
code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impe
CVE-2026-8890
code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impe
CVE-2026-44776
Kavita is a cross platform reading server. Prior to 0.9.0, the download, size-check, and chapter metadata endpoints do n
CVE-2026-47716
Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes acces
CVE-2026-47715
Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier
CVE-2026-43934
e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the applicati
CVE-2026-38587
An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw ex
CVE-2026-8679
The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including