A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver...
CVE-2026-89062
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a loc
#severity:medium
共收录 5523 条相关情报。
← 返回所有主题A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url...
CVE-2026-111210
A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSe
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33...
CVE-2026-16754
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusive
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the...
CVE-2026-16755
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that c
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono...
CVE-2026-111368
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission r
BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows...
CVE-2026-111367
BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to f
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any...
CVE-2026-111353
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create tim
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows...
CVE-2026-111355
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to igno
SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that...
CVE-2026-111358
SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated worksp
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any...
CVE-2026-111345
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment...
CVE-2026-111346
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale...
CVE-2026-111348
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.ph
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows...
CVE-2026-111344
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer...
CVE-2026-111349
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthen
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router...
CVE-2026-111331
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authentica
OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows...
CVE-2026-111332
OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep sh
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in...
CVE-2026-111323
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraf
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-111321
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows...
CVE-2026-111324
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwri
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that...
CVE-2026-111343
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated