共收录 2098 条相关情报。
← 返回所有主题CVE-2026-103515
GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5
CVE-2026-114715
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Mo
CVE-2026-111812
Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers und
CVE-2026-114267
A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the
CVE-2026-105942
When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broke
CVE-2026-105938
Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentica
CVE-2026-114132
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by d
CVE-2026-114131
Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rul
CVE-2026-105930
When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package stor
CVE-2026-105927
The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through query paramete
CVE-2026-114132
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by d
CVE-2026-114131
Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rul
CVE-2026-114490
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an acc
CVE-2026-114476
Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a rem
CVE-2026-114473
Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows
CVE-2026-114463
The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{
CVE-2026-87096
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec
CVE-2026-87095
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec
CVE-2026-70387
Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2
CVE-2026-114075
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted us