Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue...
CVE-2026-16644
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST v
2026-08-26 归档
今日共收录 1656 条安全情报，包含 834 个 CVE，420 篇安全通告，以及 108 篇研究论文。
← 返回归档列表Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
CVE-2026-16642
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms ...
CVE-2026-80184
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, appl
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application...
CVE-2026-80182
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped au
A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability...
CVE-2026-79845
A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of
A vulnerability was found in SililaWijesinghe Food Ordering System up to...
CVE-2026-79804
A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affec
Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for...
CVE-2026-73180
Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP se
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions...
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as r
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be...
CVE-2026-78655
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earli
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge beca
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the...
CVE-2026-68525
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating...
CVE-2026-65183
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allow
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security...
CVE-2026-65182
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves...
CVE-2026-65927
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing t
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990...
CVE-2026-65637
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the...
CVE-2026-68763
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking w
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g....
CVE-2026-68569
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that
A SQL injection vulnerability in the country-code lookup endpoint in GazellePW (GazellePosterWall...
CVE-2026-38468
A SQL injection vulnerability in the country-code lookup endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691
GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a...
CVE-2026-38474
GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulne
A Stored XSS vulnerability in the custom bonus title feature in GazellePW (GazellePosterWall)...
CVE-2026-38469
A Stored XSS vulnerability in the custom bonus title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97