#cwe-294
共收录 108 条相关情报。
← 返回所有主题 漏洞预警2026-09-03 发布INFO
CVE-2026-75034
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor
历史摘要 · 未重新核验 · NVD
安全公告2026-09-03 发布INFO
CVE-2026-75034
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-02 发布INFO
CVE-2026-12704
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo fi
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-02 发布INFO
CVE-2026-53636
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a securit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-02 发布INFO
CVE-2026-12704
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo fi
历史摘要 · 未重新核验 · NVD
安全公告2026-09-01 发布INFO
CVE-2026-84306
A flaw in the handling of one-time codes for app-based multi-factor authentication allows a previously issued code to be
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-01 发布INFO
CVE-2026-84306
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6
历史摘要 · 未重新核验 · NVD
安全公告2026-09-01 发布INFO
CVE-2026-84306
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-08-29 发布INFO
CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-29 发布INFO
CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track
历史摘要 · 未重新核验 · NVD
安全公告2026-08-29 发布INFO
CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-08-28 发布INFO
CVE-2026-13734
Zephyr's WireGuard VPN data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c vali
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-28 发布INFO
CVE-2026-82220
Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions.
历史摘要 · 未重新核验 · NVD
安全公告2026-08-26 发布INFO
CVE-2026-65905
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize req
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-25 发布INFO
CVE-2026-41707
Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDec
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-65905
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize req
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-53424
Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-55088
Etherpad is a real-time collaborative editor. From 2.6.0 until 3.1.0, Etherpad's src/node/hooks/express/tokenTransfer.ts
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-73136
Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated third party to obtain paid resources by
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-67581
Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources
历史摘要 · 未重新核验 · NVD