共收录 1259 条相关情报。
← 返回所有主题CVE-2026-53988
Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthen
CVE-2026-102811
Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmi
CVE-2026-102811
Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmi
CVE-2026-66083
The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user c
CVE-2026-8065
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions all
CVE-2026-7395
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file
CVE-2026-11796
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet
CVE-2026-86158
Missing authentication in the local .NET backend (Fiddler.WebUi) of Progress Software Fiddler Everywhere 8.0.2 allows a
CVE-2026-102245
A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the fi
CVE-2026-102363
mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that
CVE-2026-102361
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unaut
CVE-2026-102362
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Un
CVE-2026-102363
mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that
CVE-2026-102362
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Un
CVE-2026-102361
mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unaut
CVE-2026-49994
Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML
CVE-2026-49994
Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML
CVE-2026-91154
Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.
CVE-2026-101077
A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp
CVE-2026-93539
A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is no