共收录 4167 条相关情报。
← 返回所有主题CVE-2026-6821
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2
CVE-2026-63300
An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an auth
CVE-2026-4879
GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2
CVE-2026-19656
ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (includin
CVE-2026-16494
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that u
CVE-2026-73301
Budibase is an open-source low-code platform. Prior to 3.39.25, the GET /api/global/groups endpoint in packages/worker/s
CVE-2026-18244
GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2
CVE-2026-73296
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobi
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions.
CVE-2026-69107
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.
CVE-2026-68971
Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check
CVE-2026-68758
A low-privileged authenticated user may access restricted support information under specific conditions.
CVE-2026-65938
In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API
CVE-2026-65926
An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release B
CVE-2026-73405
An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to S
CVE-2026-73287
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS handles FTPS MKD in FtpsDriv
CVE-2026-73265
RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, Co
CVE-2026-68754
A repository publisher without delete permission may modify protected package content under specific conditions.
CVE-2026-68753
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in
CVE-2026-66380
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditi