共收录 1259 条相关情报。
← 返回所有主题CVE-2026-111811
Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the s
CVE-2026-112949
### Summary `@vitest/mocker`'s `interceptorPlugin` accepts mock registrations on Vite's dev-server WebSocket with no au
CVE-2026-105944
Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login,
CVE-2026-114126
Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19,
CVE-2026-114123
D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metad
CVE-2024-5563
Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha op
CVE-2026-78334
Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a remote atta
CVE-2026-59562
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0
CVE-2026-114108
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated a
CVE-2026-114090
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp serv
CVE-2026-114092
Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboard run rep
CVE-2026-114086
Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allow
CVE-2026-114085
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows
CVE-2026-114086
Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allow
CVE-2026-114085
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows
CVE-2026-91476
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcureme
CVE-2026-91358
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case manag
CVE-2026-91313
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Su
CVE-2026-91310
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Support
CVE-2026-91295
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure S