| CVE-2026-109168 |
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users…
|
7.1
Élevée
|
12 oct. 2026 |
| CVE-2026-109166 |
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users…
|
7.1
Élevée
|
12 oct. 2026 |
| CVE-2026-94536 |
lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint,…
|
4.3
Moyenne
|
21 sept. 2026 |
| CVE-2026-94535 |
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the deleteMyNotice endpoint that allows…
|
7.1
Élevée
|
21 sept. 2026 |
| CVE-2026-94534 |
lamp-cloud through 5.10.0 fails to validate user identity in PUT /anyone/baseInfo and PUT /anyone/avatar endpoints,…
|
7.1
Élevée
|
21 sept. 2026 |
| CVE-2026-94533 |
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in FileAnyoneController that allows…
|
6.5
Moyenne
|
21 sept. 2026 |
| CVE-2026-94532 |
lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows…
|
6.5
Moyenne
|
21 sept. 2026 |
| CVE-2026-91996 |
lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated…
|
8.7
Élevée
|
15 sept. 2026 |
| CVE-2026-19758 |
A vulnerability was determined in dromara lamp-cloud up to 5.10.0
|
6.9
Moyenne
|
13 août 2026 |
| CVE-2026-19757 |
A vulnerability was found in Dromara lamp-cloud up to 5.10.0
|
6.9
Moyenne
|
13 août 2026 |
| CVE-2026-19756 |
A vulnerability has been found in Dromara lamp-cloud up to 5.10.0
|
5.3
Moyenne
|
13 août 2026 |
| CVE-2026-69100 |
LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability…
|
8.7
Élevée
|
4 août 2026 |
| CVE-2026-9498 |
A vulnerability has been found in Dromara lamp-cloud up to 5.6.2
|
5.3
Moyenne
|
25 mai 2026 |
| CVE-2026-5529 |
A vulnerability was detected in Dromara lamp-cloud up to 5.8.1
|
5.3
Moyenne
|
5 avr. 2026 |