Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization...
CVE-2026-67616
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoi
#cwe-862
共收录 4228 条相关情报。
← 返回所有主题Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-66326
CVE-2026-66326 是 Microsoft Edge（基于 Chromium）中的一个缺失授权漏洞。该漏洞允许未经授权的攻击者通过网络在受影响系统上执行代码。根据 NVD 提供的元数据，该漏洞的 CVSS 评分为 6.5（中等），
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
CVE-2026-66311
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to c...
CVE-2026-67616
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoi
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does...
CVE-2026-68979
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Upd...
CVE-2026-68979
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization
Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit role...
CVE-2026-69090
Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role adm
SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and getHeadingInsertTransaction end...
CVE-2026-68587
SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction, getHea
SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints (/api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc)...
CVE-2026-68586
SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish...
CVE-2026-68585
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that r
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Cont...
CVE-2026-28147
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa
The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, inc...
CVE-2026-16300
The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticate
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated user such a...
CVE-2026-16289
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending me
The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an ac...
CVE-2026-15930
The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration bef
In Telephony, there is a possible escalation of privilege due to a missing permission check. This...
CVE-2026-20483
In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local es
In Bluetooth driver, there is a possible permission bypass due to a missing permission check....
CVE-2026-20495
In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local e
In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges nee...
CVE-2026-20495
In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local e
In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privil...
CVE-2026-20483
In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local es
A flaw was found in the keycloak-services component of Keycloak, which is used for managing...
CVE-2026-18573
A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authoriza
A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services...
CVE-2026-18570
A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This componen