共收录 50 条相关情报。
← 返回所有主题CVE-2026-9753
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed
CVE-2026-9742
When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of th
CVE-2026-11460
A flaw has been found in Boost Serialization up to 1.91. The impacted element is an unknown function. This manipulation
CVE-2024-6858
In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there
CVE-2026-47675
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize()
CVE-2026-45069
### Description `OidcTokenHandler` is Symfony's built-in access-token handler for OpenID Connect: it validates a bearer
CVE-2026-40851
A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to
CVE-2026-9521
A security vulnerability has been detected in fraillt bitsery up to 5.2.4. Affected is the function loadFromSharedState
CVE-2026-7887
For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0
CVE-2026-7887
For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0