共收录 183 条相关情报。
← 返回所有主题CVE-2026-76940
The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout m
CVE-2026-78655
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earli
CVE-2026-78655
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earli
CVE-2026-62862
Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless
CVE-2026-75575
Rocket.Chat exposes the sendForgotPasswordEmail Meteor method without a DDP rate limit, so an unauthenticated caller may
CVE-2026-78551
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to
CVE-2026-78551
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to
CVE-2026-21755
HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or creden
CVE-2026-69183
Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator
CVE-2026-76213
phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure count
CVE-2026-73529
Plainpad through 1.1.1, fixed in commit d3823fc, contains a missing rate limiting vulnerability that allows unauthentica
CVE-2026-75773
A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the f
CVE-2026-73056
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability i
CVE-2026-73056
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability i
CVE-2026-73046
SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basi
CVE-2026-73045
SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFileP
CVE-2026-73046
SiYuan笔记软件在v3.7.4之前版本中存在一个严重认证绕过漏洞（CVE-2026-73046）。漏洞源于CheckAuth()中间件对HTTP Basic Authentication分支的处理不当。该分支保护了几乎所有以/api/开
CVE-2026-73045
CVE-2026-73045 是思源笔记（SiYuan）3.7.4 之前版本中存在的一个身份验证绕过相关的暴力破解漏洞。该漏洞位于 authFilePublishAccess 端点，属于“对过度认证尝试的限制不当”（CWE-307）问题。远
CVE-2026-19898
A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmau
CVE-2026-19897
A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/a