#cwe-1394

共收录 5 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布CRITICAL

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default session_key 'm...

CVE-2026-119660

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admi

来源摘录 · NVD

安全公告2026-10-16 发布INFO

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with...

CVE-2026-92777

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows...

CVE-2026-111367

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC3...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret. The session keyword freezes its optio...

CVE-2026-75870

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared

历史摘要 · 未重新核验 · NVD