共收录 56584 条相关情报。
← 返回所有主题CVE-2026-22114
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhausti
CVE-2026-22110
The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brut
CVE-2026-22109
The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defau
CVE-2026-22105
Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the dev
CVE-2026-116366
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user wi
CVE-2025-31704
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially craf
CVE-2026-14467
An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised
CVE-2026-97209
Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use
CVE-2026-65874
This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) a
CVE-2026-64618
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fine
CVE-2026-59396
A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. When UAA retrieves a
CVE-2026-59388
Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exp
CVE-2026-59387
The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ en
CVE-2026-59386
A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper p
CVE-2026-59385
A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, en
CVE-2026-115456
A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminat
CVE-2026-115274
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an
CVE-2026-109821
Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an a
CVE-2026-82104
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 thr
CVE-2026-115455
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, interna