pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that...
CVE-2026-111343
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated
#cwe-862
共收录 3925 条相关情报。
← 返回所有主题NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of...
CVE-2026-111277
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that all
Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation
CVE-2026-102682
Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Dail
Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service
CVE-2026-102748
### Summary Dgraph `v25.3.8` exposes a Zero HTTP administrative surface that is unauthenticated when port `6080` is rea
IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor...
CVE-2026-76066
IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against t
GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler...
CVE-2026-110773
GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authen
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in developm...
CVE-2026-102682
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.9
Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message events for public channels outside their subscription...
CVE-2026-100404
Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new mess
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up...
CVE-2026-103423
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is...
CVE-2026-17092
The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authoriz
Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote...
CVE-2026-110160
Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromis
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-85938
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information loca
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-83658
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-83583
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83568
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
CVE-2026-70235
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-103560
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-102861
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-102233
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
CVE-2026-100217
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.