共收录 4122 条相关情报。
← 返回所有主题CVE-2026-69377
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges loca
CVE-2026-47625
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A
CVE-2026-86737
snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint. A
CVE-2026-86731
Craft CMS versions 5.0.0-RC1 through 5.10.11 are missing an admin-target guard in UsersController::actionActivateUser (t
CVE-2026-86665
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of t
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote
CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to
CVE-2026-12646
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to
CVE-2026-12645
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to
CVE-2026-86737
snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint. A
CVE-2026-86731
Craft CMS versions 5.0.0-RC1 through 5.10.11 are missing an admin-target guard in UsersController::actionActivateUser (t
CVE-2026-86665
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of t
CVE-2026-77106
Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade
CVE-2026-3174
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a miss
CVE-2026-2520
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modific
CVE-2026-9331
The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data th
CVE-2026-85400
Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configu
CVE-2026-77132
It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization
CVE-2026-81790
Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting I
CVE-2026-81781
Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured