共收录 318 条相关情报。
← 返回所有主题CVE-2026-40460
When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof thei
CVE-2026-44649
## Resolution SillyTavern 1.18.0 now includes a configuration option to limit which IP addresses can authorize using SS
CVE-2026-44183
Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download c
CVE-2026-45223
Crabbox before 0.9.0 contains an authentication bypass vulnerability in the coordinator user-token verification path whe
CVE-2026-27478
**Context:** A critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint (/api/1.
CVE-2021-47923
OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting ar
CVE-2021-47923
OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting ar
CVE-2026-42354
Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical v
CVE-2026-6213
A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check an
CVE-2026-44118
OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request heade
CVE-2026-39858
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high s
CVE-2026-42354
### Impact A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via S
CVE-2018-25317
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows
CVE-2025-50328
A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of th
CVE-2018-25318
Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to
CVE-2018-25317
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows
CVE-2018-25316
Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify
CVE-2026-7422
Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass