共收录 4228 条相关情报。
← 返回所有主题CVE-2026-32905
OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that allows no
CVE-2018-25391
HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to dele
CVE-2026-4290
The WP Travel Pro plugin for WordPress is vulnerable to arbitrary user deletion via the /wp-json/wp-travel/v1/travel-gui
CVE-2025-12714
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due
CVE-2026-44884
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t
CVE-2026-44849
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t
CVE-2026-44848
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t
CVE-2026-42071
Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 2.23.0 to 2.28.1, a missing authorization check in M
CVE-2026-44794
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, in the case of inter-o
CVE-2026-7802
WordPress插件Frontend Admin by DynamiApps（版本≤3.29.2）存在授权绕过漏洞。插件未能正确验证用户是否有权执行操作，导致经过身份验证的攻击者（至少订阅者权限）可以通过提供任意的?user_id=参数值
CVE-2026-4888
The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to
CVE-2026-4888
WordPress 插件 Everest Forms（包括联系表单、支付表单、测验、调查和自定义表单构建器）在 3.4.7 及之前的所有版本中，其 send_test_email() 函数缺少权限检查，导致认证用户（至少拥有订阅者级别权限）
CVE-2026-46414
Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro
CVE-2026-5296
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 1
CVE-2026-2601
GitLab has remediated an issue in GitLab EE affecting all versions from 11.5 before 18.10.7, 18.11 before 18.11.4, and 1
CVE-2026-5296
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 1
CVE-2026-2601
GitLab has remediated an issue in GitLab EE affecting all versions from 11.5 before 18.10.7, 18.11 before 18.11.4, and 1
CVE-2026-49054
Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Cont
CVE-2022-41656
Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured
CVE-2026-48151
Budibase is an open-source low-code platform. Prior to 3.39.0, the webhook schema-building endpoint is registered under