共收录 4167 条相关情报。
← 返回所有主题CVE-2026-72843
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/
CVE-2026-54509
TREK is a collaborative travel planner. From 3.0.0 until 3.1.0, the GET /api/journeys/:id/share-link route in server/src
CVE-2026-72843
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/
CVE-2026-54509
TREK is a collaborative travel planner. From 3.0.0 until 3.1.0, the GET /api/journeys/:id/share-link route in server/src
CVE-2026-19755
NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled c
CVE-2026-63003
django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0
CVE-2026-61663
django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0
CVE-2026-54624
django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0
CVE-2026-53569
Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted toggle_like and mark_a
### Impact Affected versions of Winter CMS did not enforce the `ImportExportController` behavior's granular access cont
### Summary Two endpoints serving in-house iOS application packages and manifests in Fleet's enterprise tier are reacha
CVE-2026-61663
## Summary The django-cms frontend-editing structure endpoint ``` GET //admin/cms/placeholder/object//structure// ```
CVE-2026-63003
## Impact The only authorization gate on the duplicate flow is `PageAdmin.has_add_permission`, which checks `user_can_a
CVE-2026-57570
## Vulnerability Details Affected area: HasMany / MorphMany relation handling during CRUD create and update operations
CVE-2026-54624
### Summary The structure-board endpoint (`render_object_structure`) renders a page's plugin structure without verifying
CVE-2026-63003
django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0
CVE-2026-55095
OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-a
CVE-2026-55095
OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-a
CVE-2026-76633
WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authentica
CVE-2026-64965
ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. A low-privileged authenticat