共收录 3939 条相关情报。
← 返回所有主题CVE-2026-109188
jshERP through 3.6 contains a missing authorization vulnerability that allows low-privilege authenticated users to creat
CVE-2026-109187
jshERP through 3.6 contains an information disclosure vulnerability that allows any authenticated user to read platform-
CVE-2026-109185
jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows a
CVE-2026-109184
jshERP through 3.6 contains an improper authorization vulnerability that allows low-privilege authenticated users to rea
CVE-2026-109183
jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved
CVE-2026-109179
jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to
CVE-2026-109178
jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to
CVE-2026-109173
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to
CVE-2026-109172
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to
CVE-2026-109171
yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to
CVE-2026-108950
Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler
CVE-2026-107869
Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrect
CVE-2026-107863
Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users
CVE-2026-107423
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Con
CVE-2026-107432
Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly C
CVE-2026-107430
Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhispe
CVE-2026-103356
Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly
CVE-2026-107791
The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of it
CVE-2026-108800
A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulat
CVE-2026-108888
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler