SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without...
CVE-2026-48909
SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauth
#severity:critical
共收录 1441 条相关情报。
← 返回所有主题A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for...
CVE-2026-48908
A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultima
Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and...
CVE-2026-56081
Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all...
CVE-2026-11551
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and in
Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that...
CVE-2026-56073
Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypa
OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)
### Summary OpenRemote Manager is vulnerable to a cross-tenant Insecure Direct Object Reference (IDOR) in the bulk alarm
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate...
CVE-2026-48582
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate...
CVE-2026-48584
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a networ
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate...
CVE-2026-45480
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
CVE-2026-55447
### Summary All components based on `BaseFileComponent` are vulnerable to the following vulnerability: 1. Docling (`Docl
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
CVE-2026-55255
## Summary Insecure Direct Object Reference (IDOR) vulnerability in `/api/v1/responses` endpoint allows an authenticate
Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs
CVE-2026-55791
**1. Overview** Craft CMS is vulnerable to Server-Side Request Forgery (SSRF) and Arbitrary JavaScript Injection throug
Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag
## Summary Crossplane allows package signature verification to be configured via the `ImageConfig` mechanism. When enab
Stored cross-site scripting in pgAdmin 4's error-rendering and plan-node-rendering paths. Text...
CVE-2026-12048
Stored cross-site scripting in pgAdmin 4's error-rendering and plan-node-rendering paths. Text returned by a PostgreSQL
Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a...
CVE-2026-40624
Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated att
Two state-mutating endpoints in pgAdmin 4's SQL Editor blueprint -- DELETE /sqleditor/close/...
CVE-2026-12046
Two state-mutating endpoints in pgAdmin 4's SQL Editor blueprint -- DELETE /sqleditor/close/ and POST /sqleditor/initial
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate...
CVE-2026-47647
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to...
CVE-2026-54130
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information ove
Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence...
CVE-2026-12045
Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that th
gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)
CVE-2026-0755
Untrusted prompt input could reach the Gemini CLI @file parser, allowing read/exfiltration of arbitrary local files (@/e