The Approval app's approve/reject endpoint is meant to require the file's current etag as a...
CVE-2026-82982
The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题A vulnerability in the team folders (formerly group folders) app when used in combination with...
CVE-2026-77169
A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed
A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function...
CVE-2026-93331
A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file
The Deck config API allows authenticated users to set board-scoped configuration keys for...
CVE-2026-77170
The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without va
Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV...
CVE-2026-82980
Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The D
Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before...
CVE-2026-77164
Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote insta
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of...
CVE-2026-93310
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collect
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw...
CVE-2026-93454
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plu
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress...
CVE-2026-93451
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allo
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-2585
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rootAttributes’ para
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for...
CVE-2026-18441
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to I
Improper neutralization of special elements used in a command ('command injection') in Microsoft...
CVE-2026-55946
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to...
CVE-2026-16750
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of da
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...
CVE-2026-14311
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized access and
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...
CVE-2026-16582
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized modificatio
A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an...
CVE-2026-93395
A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when proc
A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the...
CVE-2026-93394
A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and
HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when...
CVE-2026-67071
HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted proper
Applications built on MongoDB Entity Framework Core Provider which place a database name in the...
CVE-2026-92757
Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may in
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application...
CVE-2026-92758
If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive