#cwe-287
共收录 1077 条相关情报。
← 返回所有主题 漏洞预警2026-10-12 发布INFO
CVE-2026-85958
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validati
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-109372
ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-109313
Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-109312
Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the se
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-108907
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execut
历史摘要 · 未重新核验 · NVD
安全公告2026-10-12 发布INFO
CVE-2026-109372
ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-12 发布INFO
CVE-2026-109313
Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-12 发布INFO
CVE-2026-109312
Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the se
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-10-12 发布INFO
CVE-2026-108818
A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependen
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-109082
A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services com
历史摘要 · 未重新核验 · NVD
安全公告2026-10-11 发布INFO
CVE-2026-108865
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-11 发布INFO
CVE-2026-108865
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt
历史摘要 · 未重新核验 · NVD
安全公告2026-10-11 发布INFO
CVE-2026-108865
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-10-11 发布INFO
CVE-2026-88827
The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication pa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-11 发布INFO
CVE-2026-84737
The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-11 发布INFO
CVE-2026-84734
The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request again
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-11 发布INFO
CVE-2026-108522
A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login
历史摘要 · 未重新核验 · NVD
安全公告2026-10-11 发布INFO
CVE-2026-108707
Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthentic
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-11 发布INFO
CVE-2026-108707
Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthentic
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-10 发布INFO
CVE-2026-108548
AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that
历史摘要 · 未重新核验 · NVD