共收录 3962 条相关情报。
← 返回所有主题CVE-2026-107813
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node a
CVE-2026-107811
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can acce
CVE-2026-104117
A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent
CVE-2026-104116
A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disr
CVE-2026-108112
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete ot
CVE-2026-108111
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that ex
CVE-2026-104116
A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disr
CVE-2026-104117
A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent
CVE-2026-62028
Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-ima
CVE-2026-105883
Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Ac
CVE-2026-104079
Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint
CVE-2026-87846
The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership chec
CVE-2026-86851
The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acti
CVE-2026-62042
Missing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exploiting Incorrectly
CVE-2026-62041
Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Conf
CVE-2026-62040
Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-a
CVE-2026-39779
Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Acce
CVE-2026-107419
Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allo
CVE-2026-96518
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configur
CVE-2026-96461
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control