共收录 2104 条相关情报。
← 返回所有主题CVE-2026-95289
Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social en
CVE-2026-102807
OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-s
CVE-2026-102806
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist t
CVE-2026-102807
OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-s
CVE-2026-102806
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist t
CVE-2026-102697
Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bas
CVE-2026-102697
Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bas
CVE-2026-102568
Pardus Parental Control before 0.7.0 contains an incorrect authorization vulnerability in the polkit policy that allows
CVE-2026-102568
Pardus Parental Control before 0.7.0 contains an incorrect authorization vulnerability in the polkit policy that allows
CVE-2026-78214
An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whethe
CVE-2026-71899
A missing authorization vulnerability exists in the `query-dynamic-sub-workflows` API of Apache DolphinScheduler. The AP
CVE-2026-71898
An incorrect authorization check in Apache DolphinScheduler allows an authenticated user with only read permission for a
CVE-2026-71897
An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-
CVE-2026-10518
GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4
CVE-2026-102249
A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /common
CVE-2026-102335
Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin use
CVE-2026-102297
ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenti
CVE-2026-102335
Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin use
CVE-2026-102297
ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenti
CVE-2026-100392
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Us