共收录 1077 条相关情报。
← 返回所有主题CVE-2026-120191
A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of t
CVE-2026-119096
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and inc
CVE-2026-103898
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versi
CVE-2026-119980
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerab
CVE-2026-119166
The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and
CVE-2026-63398
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolv
CVE-2026-116239
In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an
CVE-2026-62264
PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1,
CVE-2026-61739
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77,
CVE-2026-110799
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version
CVE-2026-119572
Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX pr
CVE-2026-118194
The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inc
CVE-2026-114443
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the acco
CVE-2026-118959
A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request i
CVE-2026-107058
An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another us
CVE-2026-62264
### Impact When `@sylphx/pdf-reader-mcp` is run as an HTTP server (`MCP_TRANSPORT=http`), it reads the `MCP_API_KEY` en
CVE-2026-93680
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper auth
CVE-2026-90862
Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202
CVE-2026-84296
Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2
CVE-2026-84295
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allo