A weakness has been identified in nemoTyrant manong up to...
CVE-2026-111866
A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the fun
#severity:medium
共收录 5523 条相关情报。
← 返回所有主题Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2...
CVE-2026-111933
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration v
Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113...
CVE-2026-111926
Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest h
Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware...
CVE-2026-111934
Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmos
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2...
CVE-2026-111930
Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint
Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling...
CVE-2026-111931
Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2...
CVE-2026-111932
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML inject
Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner...
CVE-2026-111929
Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gR
Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow...
CVE-2026-111928
Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/po
Admidio before 5.0.16 contains an information disclosure vulnerability that allows...
CVE-2026-111916
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view rol
Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models...
CVE-2026-111920
Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which res
Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in...
CVE-2026-111918
Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that al
Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project...
CVE-2026-111921
Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write per
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows...
CVE-2026-111913
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to expor
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that...
CVE-2026-111904
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated atta
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization...
CVE-2026-111900
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.p
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability...
CVE-2026-111896
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that al
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in...
CVE-2026-111903
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in...
CVE-2026-111902
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that t
phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site...
CVE-2026-111894
phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability that