#cwe-294

共收录 108 条相关情报。

← 返回所有主题
漏洞预警2026-09-03 发布INFO

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so eac...

CVE-2026-75034

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

Rancher: SAML Assertion Replay

CVE-2026-75034

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation...

CVE-2026-12704

When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo fi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS p...

CVE-2026-53636

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a securit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins....

CVE-2026-12704

When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo fi

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used

CVE-2026-84306

A flaw in the handling of one-time codes for app-based multi-factor authentication allows a previously issued code to be

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/src/Auth/MultiFactor/App/AppAuthenticat...

CVE-2026-84306

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used

CVE-2026-84306

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-29 发布INFO

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp...

CVE-2026-82470

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-29 发布INFO

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe ...

CVE-2026-82470

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track

历史摘要 · 未重新核验 · NVD

安全公告2026-08-29 发布INFO

Rodauth before 2.47.0 TOTP Code Reuse via Drift Window

CVE-2026-82470

Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-28 发布INFO

Zephyr's WireGuard VPN data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c validated the anti-replay counter too late. After AEAD decryp...

CVE-2026-13734

Zephyr's WireGuard VPN data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c vali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions.

CVE-2026-82220

Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions.

历史摘要 · 未重新核验 · NVD

安全公告2026-08-26 发布INFO

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If...

CVE-2026-65905

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize req

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-25 发布INFO

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerab...

CVE-2026-41707

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authentica...

CVE-2026-65905

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize req

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it. Samly....

CVE-2026-53424

Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Etherpad is a real-time collaborative editor. From 2.6.0 until 3.1.0, Etherpad's src/node/hooks/express/tokenTransfer.ts uses POST /tokenTransfer to store an author token for tr...

CVE-2026-55088

Etherpad is a real-time collaborative editor. From 2.6.0 until 3.1.0, Etherpad's src/node/hooks/express/tokenTransfer.ts

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by replaying a transfer settled by an unrelated payer. MPP...

CVE-2026-73136

Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain transfer. MPP.Metho...

CVE-2026-67581

Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources

历史摘要 · 未重新核验 · NVD