共收录 2118 条相关情报。
← 返回所有主题CVE-2026-73286
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get_condition_values folds a
CVE-2026-73285
RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.64 until 1.0.0-rc.1, RustFS external OPA a
CVE-2026-73265
RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, Co
CVE-2026-68755
A bundle writer may create misleading release promotion information under specific conditions.
CVE-2026-18171
Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the und
CVE-2026-47231
Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-c
CVE-2026-47230
Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` mode `file_re
CVE-2026-47227
Admidio is an open-source user management solution. `modules/categories.php` checks that the supplied `type` parameter (
CVE-2026-64952
The hunt_delete() VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLL
CVE-2026-18046
The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability
CVE-2026-15388
The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability
CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rath
CVE-2026-18712
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileg
CVE-2026-18698
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag
CVE-2026-18703
An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authe
CVE-2026-18696
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to
CVE-2026-18690
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag
CVE-2026-63177
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Ng
CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rath
CVE-2026-63177
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Ng