共收录 4167 条相关情报。
← 返回所有主题CVE-2026-78370
RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated rem
CVE-2026-76847
act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact
CVE-2026-78365
Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 all
CVE-2026-78291
Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.
CVE-2026-78272
Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.
CVE-2026-78258
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.
CVE-2026-28190
Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.
CVE-2026-28153
Unauthenticated Broken Access Control in Notification Master – Real-Time WordPress Notifications With Email, SMS,
CVE-2026-19200
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an impl
CVE-2026-19200
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an impl
CVE-2026-78204
Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccess
CVE-2026-78204
Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccess
CVE-2026-14853
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, a
CVE-2026-14853
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, a
CVE-2026-75866
Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant t
CVE-2026-5093
The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of da
CVE-2026-4244
The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
CVE-2026-12710
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025
CVE-2026-76074
The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordP
CVE-2026-76057
The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordP