A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote ...
CVE-2026-76656
A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of
#cwe-306
共收录 1259 条相关情报。
← 返回所有主题FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active...
CVE-2026-110838
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authenticati
Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requ...
CVE-2026-55786
Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /m
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without explicit permission restrictions or peer credential ver...
CVE-2026-109969
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets withou
Multiple Kasa devices contain an improper authentication vulnerability in the local device...
CVE-2026-108473
Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unaut
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
CVE-2026-96858
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perfor
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85884
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized at
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
CVE-2026-83715
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tamperi
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-83656
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-83654
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
CVE-2026-70580
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofi
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
CVE-2026-70137
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose informatio
A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under specific conditions. This could enable an attacker to access administ...
CVE-2026-69227
A flaw in Portal for ArcGIS allows unauthenticated access to certain /portaladmin/local API endpoints under specific con
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service o...
CVE-2026-55183
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/orde...
CVE-2026-110128
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to re
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public e...
CVE-2026-110114
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to dele
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.
CVE-2026-106043
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote u
fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
CVE-2026-110128
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to re
oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints
CVE-2026-110114
FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to dele
RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page
CVE-2026-55183
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.