共收录 56584 条相关情报。
← 返回所有主题CVE-2026-115683
A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany regist
CVE-2026-112348
Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers
CVE-2026-112347
Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API
CVE-2026-111500
Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerabili
CVE-2026-111499
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v
CVE-2026-111498
OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged a
CVE-2026-100355
Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the ser
CVE-2026-91917
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileg
CVE-2026-87768
DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_l
CVE-2026-75882
An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with s
CVE-2026-64860
Rejected reason: Further research determined the issue is not a vulnerability.
CVE-2026-13576
CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed wit
CVE-2026-119038
Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a
CVE-2026-119037
Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or e
CVE-2026-119036
Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before
CVE-2026-118996
CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserC
CVE-2026-118995
CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator. creat
CVE-2026-118994
CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name. login() writes the logi
CVE-2026-118993
CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expre
CVE-2026-118992
CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configur