共收录 3925 条相关情报。
← 返回所有主题CVE-2026-109444
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run
CVE-2025-7043
The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid ac
CVE-2026-111058
Mercury runs a JupyterLab server with **anonymous access by default** (`mercury_app/__main__.py` sets `--IdentityProvide
CVE-2026-68482
Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenti
CVE-2026-112192
MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settin
CVE-2026-108766
Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly
CVE-2026-111910
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php
CVE-2026-111916
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view rol
CVE-2026-111914
Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php
CVE-2026-111897
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted ed
CVE-2026-111889
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the
CVE-2026-110882
Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows
CVE-2026-57169
Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers
CVE-2026-18799
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to restrict Slack impo
CVE-2026-18795
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to enforce DM/GM check
CVE-2026-109812
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computi
CVE-2026-92629
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in th
CVE-2026-111353
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create tim
CVE-2026-111350
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows au
CVE-2026-111349
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthen