JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit...
CVE-2026-108876
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController...
CVE-2026-108870
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler tha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...
CVE-2026-108873
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged...
CVE-2026-108869
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController...
CVE-2026-108875
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler
Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that...
CVE-2026-108858
Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied a
Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP...
CVE-2026-108861
Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the fiel
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController...
CVE-2026-108867
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById han
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated...
CVE-2026-108866
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any accou
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function...
CVE-2026-108684
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows...
CVE-2026-108862
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to
Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability...
CVE-2026-108857
Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configu
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108855
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user t
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any...
CVE-2026-108854
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that...
CVE-2026-108850
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated at
phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server...
CVE-2026-108851
phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram...
CVE-2026-108756
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys...
CVE-2026-108754
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low...
CVE-2026-108697
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to lis
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the...
CVE-2026-108701
1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the ContractController sortModule ha