共收录 2248 条相关情报。
← 返回所有主题CVE-2026-52779
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, a cross-project IDOR / au
CVE-2026-44735
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares en
CVE-2026-9640
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 reg
CVE-2026-46595
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of cal
CVE-2026-55163
## Summary The `PUT /api/1/roles/` handler in `lemur/roles/views.py` gates only on `RoleMemberPermission(role_id).can(
CVE-2026-49219
An incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using
CVE-2026-54096
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec
CVE-2026-54091
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec
CVE-2026-55411
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI
CVE-2026-54573
Outline is a service that allows for collaborative documentation. Prior to 1.8.0, the AuthenticationHelper.canAccess fun
CVE-2026-5952
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and
CVE-2026-5796
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and
CVE-2026-11379
GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, an
CVE-2026-0934
GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.
CVE-2026-52808
Gogs is an open source self-hosted Git service. Prior to 0.14.3, three API endpoints — PATCH /api/v1/repos/:owner/:repo/
CVE-2026-52795
Gogs is an open source self-hosted Git service. In 0.14.3 and earlier, any authenticated user can watch a private reposi
CVE-2026-56232
Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps constraints on subkeys provided via x-limited
CVE-2026-48507
### Impact The vulnerability allows a non-admin user holding only the granular `users.edit` permission to lock every adm
CVE-2026-54518
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From
CVE-2026-48493
### Impact A user with only users.edit AND api permissions can send a PATCH to /api/v1/users/{their_own_id} and grant th