Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions.
CVE-2026-82852
Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions.
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the...
CVE-2026-82919
A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of t
Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <...
CVE-2026-81280
Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions.
Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions.
CVE-2026-81762
Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions.
Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.
CVE-2026-81758
Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.
Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.
CVE-2026-81778
Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly...
CVE-2026-81278
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Secur
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the...
CVE-2026-81267
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the d
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged...
CVE-2023-20511
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double f
A user with organization administrator permissions can delete dashboard snapshots belonging to...
CVE-2026-19197
A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on th
Kimai before 2.54.0 contains a timing oracle vulnerability in TokenAuthenticator that allows...
CVE-2026-80199
Kimai before 2.54.0 contains a timing oracle vulnerability in TokenAuthenticator that allows unauthenticated attackers t
@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking
CVE-2026-81888
### Summary The built-in social login providers accept an OAuth callback even when the `state` value is absent on both
TYPO3 CMS - Unrestricted File Upload in Form Framework
CVE-2026-15305
### Problem Users were able to upload files with arbitrary MIME types to forms using _FileUpload_ or _ImageUpload_ eleme
A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the...
CVE-2026-82815
A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of th
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an...
CVE-2026-82605
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the comp
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The...
CVE-2026-82607
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the fu
A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown...
CVE-2026-82600
A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the fi
A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file...
CVE-2026-82598
A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the comp
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the...
CVE-2026-82604
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language M
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects...
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /as