phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user...
CVE-2026-111892
phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and use
#severity:medium
共收录 5523 条相关情报。
← 返回所有主题phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows...
CVE-2026-111888
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration...
CVE-2026-111887
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauth
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing...
CVE-2026-111889
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the
Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order...
CVE-2026-110882
Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open...
CVE-2024-58398
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the
The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is...
CVE-2026-110253
The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable to limited media fi
The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via...
CVE-2026-109983
The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'post_title' paramete
Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`
CVE-2026-96628
## Summary Arcane v2.10.2 contains an authorization inconsistency in `AuthMiddleware.managerAuth`. When a request supp
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
CVE-2026-58494
## Summary Wasmtime's WASI filesystem implementation lets a guest with a read-only source file capability overwrite tha
Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user...
CVE-2026-111388
Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for non-ses
Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows...
CVE-2026-111386
Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enu
Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool...
CVE-2026-111385
Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.downloa
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket...
CVE-2026-111373
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicio
FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam...
CVE-2026-111374
FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious
FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL...
CVE-2026-111375
FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows mal
A weakness has been identified in Ultralytics FastSAM up to...
CVE-2026-111237
A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the f
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of...
CVE-2026-109812
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computi
The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4...
CVE-2026-100159
The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is du
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with...
CVE-2026-92777
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocke