Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
CVE-2026-104387
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
#cwe-862
共收录 4084 条相关情报。
← 返回所有主题Subscriber Broken Access Control in WPO365 <= 44.1 versions.
CVE-2026-102915
Subscriber Broken Access Control in WPO365 <= 44.1 versions.
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwr...
CVE-2026-89289
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfi
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25267
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
CVE-2026-32582
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
CVE-2026-105072
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
CVE-2026-39723
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
CVE-2026-39723
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
CVE-2026-32582
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
CVE-2026-105072
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery...
CVE-2026-105706
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut
OpenClaw: Channel read actions could skip target allowlists
### Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secre...
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake defin
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/bui...
CVE-2026-105698
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify t...
CVE-2026-105696
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permiss
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly sc...
CVE-2026-105695
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session u