A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this...
CVE-2026-115972
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function
#cwe-862
共收录 3925 条相关情报。
← 返回所有主题A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAu...
CVE-2026-115972
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function
Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi...
CVE-2026-114191
Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-wooc
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows...
CVE-2026-114192
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configure
DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController:...
CVE-2026-116008
DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allo
Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows...
CVE-2026-114705
Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Con
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to...
CVE-2026-115975
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delet
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting...
CVE-2026-110892
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces
The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or...
CVE-2026-97353
The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before
The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability...
CVE-2026-97352
The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX a
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or...
CVE-2026-107887
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the actio
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check...
CVE-2026-107907
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front
FastMCP: Post-transform component authorization is skipped on direct calls
## Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cro...
CVE-2026-115796
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Manag
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11.0 to before version 26.05, several Jakarta WebSocket end...
CVE-2026-55463
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11
A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative grants to overwrite global Zimlet conf...
CVE-2026-93639
A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no expli
Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with n...
CVE-2026-114356
Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 thro
Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a l...
CVE-2026-114354
Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C
PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and ...
CVE-2026-57116
PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deploy
PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe ...
CVE-2026-56836
PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console en