共收录 4087 条相关情报。
← 返回所有主题CVE-2026-94501
jshERP through 3.6 contains an authorization bypass vulnerability in the userBusiness CRUD endpoints that allows authent
CVE-2026-94496
jshERP through 3.6 fails to validate caller permissions in role management endpoints, allowing authenticated users to mo
CVE-2026-94495
jshERP through 3.6 fails to properly validate user privileges in SystemConfigService.updateSystemConfig, allowing authen
CVE-2026-94414
jshERP through 3.6 is missing an authorization check on the POST /userBusiness/updateBtnStr endpoint that allows authent
CVE-2026-94412
jshERP through 3.6 contains an authorization bypass vulnerability in the POST /user/resetPwd endpoint that allows authen
CVE-2026-94411
jshERP 3.6 contains a privilege escalation vulnerability in the updateOneValueByKeyIdAndType endpoint that allows authen
CVE-2026-91167
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.28.4, PUT /@warpgate/admin/api/users/
CVE-2026-94113
Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in white
CVE-2026-94113
Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in white
CVE-2026-94113
Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in white
CVE-2026-92965
The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code sup
CVE-2026-92965
The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code sup
CVE-2026-94001
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint
CVE-2026-93999
A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution
CVE-2026-94000
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue oc
CVE-2026-94001
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint
CVE-2026-94000
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue oc
CVE-2026-93999
A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution
CVE-2026-9613
The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all version
CVE-2026-18346
The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.1. This