共收录 4122 条相关情报。
← 返回所有主题CVE-2026-91732
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromis
CVE-2026-91717
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtai
CVE-2026-91713
Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised t
CVE-2026-66887
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
CVE-2026-18426
Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control
CVE-2026-18425
Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action (Concrete\Controller\Backend\Dashboard\Sitem
CVE-2026-18422
Concrete CMS before 9.5.3 did not enforce a destination-side authorization check and did not validate a CSRF token in th
CVE-2026-81923
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving
CVE-2026-81922
Concrete CMS before 9.5.3 did not enforce a per-page authorization check when reordering pages from the sitemap. In the
CVE-2026-81921
Concrete CMS 8.5.3 through 9.5.2 enabled the OAuth 2.0 refresh-token grant using the unmodified upstream League grant, w
CVE-2026-68533
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluatin
CVE-2026-68530
Concrete CMS 9 through 9.5.2 did not perform an authorization check on several board-instance actions in the Boards area
CVE-2026-68529
Concrete CMS 9.0.0 through 9.5.2 was missing an authorization check on the Express entries advanced-search dashboard act
CVE-2026-18421
Concrete CMS 9 through 9.5.2 does not perform an authorization check in three actions of the Boards data source dashboar
CVE-2026-0192
In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local e
CVE-2026-56830
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store()
CVE-2026-56829
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantSto
CVE-2026-56827
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/At
CVE-2026-56825
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/Collecti
CVE-2026-18115
Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_properties permissions on the REST API user write endpoi