共收录 1260 条相关情报。
← 返回所有主题CVE-2026-70757
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
CVE-2026-70756
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
CVE-2026-70748
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
CVE-2026-81238
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulne
CVE-2026-12910
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 1
CVE-2026-59160
Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts it
CVE-2026-18111
Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image
CVE-2026-59971
MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2
CVE-2026-49254
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4, manager/router/ro
CVE-2026-91996
lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated attacker
CVE-2026-57140
PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the
CVE-2026-57139
PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp() in src/praisonai-ts/src/mcp/serve
CVE-2026-57112
PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, Tool
CVE-2026-91002
A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of t
CVE-2026-90896
Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checko
CVE-2026-53714
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway
CVE-2026-12763
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context
CVE-2026-54246
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13, the routesrv component serves clu
CVE-2026-59178
## Summary The dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier
CVE-2026-90449
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party admin