共收录 1261 条相关情报。
← 返回所有主题CVE-2026-75919
phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated att
CVE-2026-60731
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versi
CVE-2026-60698
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
CVE-2026-60696
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
CVE-2026-60682
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The suppo
CVE-2026-52480
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via t
CVE-2026-71878
Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated P
CVE-2026-75854
ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that al
CVE-2026-75852
ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin
CVE-2026-56677
9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/o
CVE-2026-56677
### Summary A Server-Side Request Forgery (SSRF) vulnerability exists in the 9Router dashboard via the `/api/auth/oidc/
CVE-2026-75479
JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows un
CVE-2026-75479
JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows un
CVE-2026-67966
Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemo
CVE-2026-75060
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools
CVE-2026-19971
A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of th
CVE-2026-74245
A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could downloa
CVE-2026-74243
A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated
CVE-2026-74245
CVE-2026-74245 是 Red Hat Quay 导出日志功能中的一个信息泄露漏洞。Red Hat Quay 是一款广泛部署的企业级容器镜像仓库。该漏洞源于导出日志的下载接口在授权校验上存在缺失：攻击者无需认证，只要拥有一个有效的
CVE-2026-74243
CVE-2026-74243 是 Red Hat Quay 中的一个安全漏洞。当 SECURITY_SCANNER_V4_PSK（预共享密钥）未设置时，远程未认证的攻击者可以向安全扫描器通知端点发送构造的 POST 请求。该请求能够淹没通知