共收录 137 条相关情报。
← 返回所有主题CVE-2026-119565
Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that al
CVE-2026-114573
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus all
CVE-2026-107249
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows
CVE-2026-90863
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and
CVE-2026-118538
A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTr
CVE-2026-58255
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administrat
CVE-2026-96378
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decouple
CVE-2026-96378
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decouple
CVE-2026-112239
The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page recor
CVE-2026-108948
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of t
CVE-2026-92119
REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users a
CVE-2026-109186
jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticat
CVE-2026-108740
GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that
CVE-2026-108740
GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that
CVE-2026-106100
Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions before 3.87.0 a
CVE-2026-105863
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custo
CVE-2026-102780
Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.
CVE-2026-105180
A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/up
CVE-2026-103918
oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.10, th
CVE-2026-103036
oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the