LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated...
CVE-2026-105125
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON fi
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in...
CVE-2026-105130
LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allow
LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot...
CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password
W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that...
CVE-2026-105124
W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers...
CVE-2026-105128
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by sup
OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers...
CVE-2026-105122
OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modi
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated...
CVE-2026-105121
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy se
OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint...
CVE-2026-105120
OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that a
OpenAM before 16.1.3 contains an email content injection vulnerability that allows...
CVE-2026-105117
OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control
Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup...
CVE-2026-105112
Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message,...
CVE-2026-105116
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target
OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows...
CVE-2026-105114
OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport...
CVE-2026-71892
In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.
In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels:...
CVE-2026-18040
In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and...
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ra
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-92767
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-103421
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to...
CVE-2026-92974
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc
The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...
CVE-2026-93896
The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and
The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is...
CVE-2026-11601
The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authoriz