BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint,...
CVE-2026-86111
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated
#severity:high
共收录 5371 条相关情报。
← 返回所有主题Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API...
CVE-2026-86116
Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API endpoints, allowing any a
BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough...
CVE-2026-86113
BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authe
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation...
CVE-2026-81543
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,
The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-83625
The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing...
CVE-2026-82684
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in...
CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the...
CVE-2026-86098
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that
PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in...
CVE-2026-86097
PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set
In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which...
CVE-2026-77393
In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenti
ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint,...
CVE-2026-86091
ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-ad
ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and...
CVE-2026-86090
ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers.
TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop
### Summary `@typespec/spector` registers a `POST /.admin/stop` HTTP route with no authentication, authorization token,
An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs...
CVE-2026-85787
An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before ve
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request...
CVE-2026-82712
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded...
CVE-2026-77847
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80118
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80114
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80112
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80119
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10