共收录 64 条相关情报。
← 返回所有主题CVE-2026-119700
WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determ
CVE-2026-100164
Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. A
CVE-2026-49442
Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerab
CVE-2024-7478
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or
CVE-2026-111887
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauth
CVE-2026-111386
Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enu
CVE-2026-103526
In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid
CVE-2026-109206
LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attac
CVE-2026-107843
`ModuleRegistration::compile()` reaches its follow-up registration branch on **any** POST to a page carrying the module.
CVE-2026-107843
Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile() enters its follo
CVE-2026-59785
Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A
CVE-2026-74904
Same CWE-862 family, found via an automated bulk sweep of every `/api/block/*` handler in `kernel/api/block.go` for the
CVE-2026-82043
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine
CVE-2026-82043
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine
CVE-2026-104439
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated att
CVE-2026-104439
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated att
CVE-2026-84717
A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center web
CVE-2026-84717
A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center web
CVE-2026-71462
StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths.
CVE-2026-71458
URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403