Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to...
CVE-2018-25421
Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files
#severity:high
共收录 5509 条相关情报。
← 返回所有主题SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to...
CVE-2018-25410
SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queri
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...
CVE-2018-25420
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...
CVE-2018-25418
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S
The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php...
CVE-2018-25408
The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php endpoint that allows unauth
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated...
CVE-2018-25407
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers...
CVE-2018-25417
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated...
CVE-2018-25406
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated...
CVE-2018-25405
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arb
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function...
CVE-2026-10120
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the...
CVE-2026-10119
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of
The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and ...
CVE-2026-9757
The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all ve
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is...
CVE-2026-7465
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Ex
The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable...
CVE-2026-7459
The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscr
praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role
CVE-2026-47409
## Summary **Type:** Authorization bypass enabling owner lockout. The `DELETE /workspaces/{workspace_id}/members/{user_
praisonai-platform: Label endpoints' unchecked label_id/issue_id enable cross-workspace label IDOR (edit, delete, link)
CVE-2026-47414
## Summary **Type:** Insecure Direct Object Reference. Five label endpoints — `PATCH /workspaces/{workspace_id}/labels/
praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks
CVE-2026-47406
## Summary **Type:** Insecure Direct Object Reference. The dependency endpoints (`POST/GET /workspaces/{workspace_id}/i
PraisonAI Platform: Missing role checks let any workspace member become owner and control workspace membership
CVE-2026-47405
### Summary PraisonAI Platform has a broken workspace authorization check that allows any authenticated low-privilege w
PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID
CVE-2026-47399
### Summary PraisonAI Platform's workspace-scoped REST routes contain a systemic object-level authorization flaw that a
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
CVE-2026-48169
### Summary The PraisonAI Platform API has two authorization failures that together break workspace isolation. The serv