共收录 2098 条相关情报。
← 返回所有主题CVE-2026-114537
Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpub
CVE-2026-114530
Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from
CVE-2026-107307
Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker
CVE-2026-107263
Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg version
CVE-2026-107258
Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects I
CVE-2026-107257
Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream version
CVE-2026-107255
Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restri
CVE-2026-107251
Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This
CVE-2026-119200
Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-en
CVE-2026-102260
HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API e
CVE-2026-119115
Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer)
CVE-2026-107049
An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supply
CVE-2026-63414
In token-exchange authenticated controllers, `shopify_app` exposes shop context through helpers such as `current_shopify
CVE-2026-62290
## Summary `Challenge` resources under `acme.cert-manager.io` can be created directly by namespace users. On create, ce
CVE-2026-85330
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over
CVE-2025-13050
Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user
CVE-2026-115712
Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-le
CVE-2026-118669
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials
CVE-2026-116575
Summary _build_session_scope() in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the
CVE-2026-118668
langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or Typ