共收录 2098 条相关情报。
← 返回所有主题CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user
CVE-2026-110176
The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a f
CVE-2026-63414
Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, `token-exchange` authenticate
CVE-2026-63338
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica
CVE-2026-118669
## Summary OAuthlib's token grant handlers can authenticate one client while authorizing the grant type and requested s
CVE-2026-63115
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo` handle
CVE-2026-58412
Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the uplo
CVE-2026-55493
HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks whether a comment is visible to
CVE-2026-55098
Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the reme
CVE-2026-116238
In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit coul
CVE-2026-115830
In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive
CVE-2026-73322
Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is e
CVE-2026-69446
Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2026-61789
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL
CVE-2026-50000
SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen
CVE-2026-115642
In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in poss
CVE-2026-46499
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11,
CVE-2026-119649
Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolder
CVE-2026-119573
Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cr
CVE-2026-119147
ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that sk