共收录 4087 条相关情报。
← 返回所有主题### Summary The `api.php?action=smwtask` API module performs no authorization check. The equivalent maintenance interfa
CVE-2026-93737
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticate
CVE-2026-93531
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vu
CVE-2026-93737
Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticate
CVE-2026-93596
ArcadeDB before 26.9.1 (com.arcadedb:arcadedb-engine _out_edges/_in_edges buckets, resulting in unauthorized modificatio
CVE-2026-93595
ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the query_database tool exposed through the AI
CVE-2026-93596
ArcadeDB before 26.9.1 (com.arcadedb:arcadedb-engine _out_edges/_in_edges buckets, resulting in unauthorized modificatio
CVE-2026-93595
ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the query_database tool exposed through the AI
CVE-2026-85410
The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template
CVE-2026-12739
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypas
CVE-2026-91707
The The Divi theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.
CVE-2026-89413
The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.
CVE-2026-89138
The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.
CVE-2026-75017
The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plu
CVE-2026-18317
The Foxtool All-in-One: Contact chat button, Custom login, Media optimize images plugin for WordPress is vulnerable to a
CVE-2026-89007
The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one o
CVE-2026-84904
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a gro
CVE-2026-93455
django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff acc
CVE-2026-93455
django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff acc
CVE-2026-16750
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of da