An authentication logic and privilege escalation vulnerability exists in the account management...
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fab
#cwe-187
共收录 13 条相关情报。
← 返回所有主题@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path (method name) matcher used by RBAC ...
CVE-2026-101914
@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches
CVE-2026-101914
### Impact When using RBAC to apply authentication rules, the exact path (method name) matcher applies a prefix match in
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potential...
CVE-2026-81479
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A
A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's i...
CVE-2026-87853
A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject i
Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base
CVE-2026-84376
## Summary Astro stripped a configured `base` path from request pathnames using a string-prefix check that did not veri
Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path from request pathnames using a string-prefix check without v...
CVE-2026-84376
Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path fro
Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base
CVE-2026-84376
Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path fro
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
CVE-2026-62750
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an ad
A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function...
CVE-2026-14687
A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function _deduplicate_results of the fil
A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function _deduplicate_results of the file InsightEngine/agent.py of the component InsightEngine s...
CVE-2026-14687
CVE-2026-14687 影响 666ghj BettaFish 版本 1.2.1 及之前版本。该漏洞位于 InsightEngine 组件的 agent.py 文件中的 _deduplicate_results 函数，用于搜索结果的去
http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router proxy-table entries as host, path, or ...
CVE-2026-55602
http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middlewar
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the system test entrypoint canonicalizes a...
CVE-2026-44837
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3