SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode...
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink
#cwe-200
共收录 1704 条相关情报。
← 返回所有主题ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the retu...
CVE-2026-105211
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected an...
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink
ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode
CVE-2026-105211
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers
SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is...
CVE-2026-105145
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environ
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environment of the file goldenverba/components/util.py of the co...
CVE-2026-105145
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environ
A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The m...
CVE-2026-105098
该漏洞影响 Omega Solution 公司的 CoinEx Crypto 2025 产品。问题出在“支持工单 API”（Support Ticket API）组件中 /ticket/customer 这一接口的未知功能函数上：当攻击者对
OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint...
CVE-2026-105120
OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that a
OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that allows realm administrators to list sessions of every real...
CVE-2026-105120
CVE-2026-105120 是 OpenAM（原 ForgeRock、现 Open Identity Platform 的访问管理组件）16.1.3 之前版本中的一处授权绕过漏洞，位于 sessions REST 端点的 query 查
OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint
CVE-2026-105120
OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that a
In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM...
CVE-2026-71883
In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM
In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and additional authent...
CVE-2026-71883
In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM
Native AES packet cipher returns the raw AES key on an alias
CVE-2026-71883
In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret...
CVE-2026-80518
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code...
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unaut
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it...
CVE-2026-86834
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root o
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission...
CVE-2026-86832
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthent
The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is...
CVE-2026-100149
The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to o...
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unaut