共收录 1077 条相关情报。
← 返回所有主题CVE-2026-105672
TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher o
CVE-2026-19494
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote
CVE-2026-19491
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote
CVE-2026-16823
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote
CVE-2026-83540
When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired f
CVE-2026-83540
When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired f
CVE-2026-106488
Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-modul
CVE-2026-106460
Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-
CVE-2026-106457
Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backen
CVE-2026-73278
Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only
CVE-2026-105305
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This c
CVE-2026-94271
The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when hand
CVE-2026-94270
The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider n
CVE-2026-59358
Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attack
CVE-2026-105704
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the
CVE-2026-105704
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the
CVE-2026-105486
A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro
CVE-2026-105486
A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro
CVE-2026-82988
There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote,
CVE-2026-105640
Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth an