共收录 65074 条相关情报。
← 返回所有主题CVE-2026-104947
WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in fu
CVE-2025-0326
The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account ma
CVE-2024-7478
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or
CVE-2024-6423
The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data t
CVE-2024-5563
Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha op
CVE-2024-5139
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malic
CVE-2024-4989
The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by ma
CVE-2026-86249
On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption
CVE-2026-86147
External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all pla
CVE-2026-86146
Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache
CVE-2026-84748
Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin ser
CVE-2026-84747
Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows re
CVE-2026-82942
A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process
CVE-2026-82425
A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the pro
CVE-2026-82231
A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the
CVE-2026-82210
Enforceable assertion in the streaming feature of Apache bRPC (version 0) and unconditionally asserts CHECK(buf.IsEmpty
CVE-2026-114403
PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to inst
CVE-2026-114402
Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImag
CVE-2026-114401
Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to en
CVE-2026-114400
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download