共收录 183 条相关情报。
← 返回所有主题CVE-2026-19898
A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmau
CVE-2026-19897
A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/a
CVE-2026-19895
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::in
CVE-2026-19895
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::in
CVE-2026-19297
IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to
CVE-2026-19297
IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to
CVE-2025-62314
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or s
CVE-2026-66340
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout
CVE-2026-66340
The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout
CVE-2026-65948
UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth is NOT a recommended option f
CVE-2026-48084
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions pri
CVE-2026-48071
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
CVE-2026-16619
The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attem
CVE-2026-48084
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions pri
CVE-2026-8793
PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticat
CVE-2026-15144
@fastify/rate-limit before 11.2.0 keys rate-limit buckets by the verbatim client IP string returned from request.ip. Bec
CVE-2026-16347
MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessi
CVE-2026-16347
MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessi
CVE-2026-55977
Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the applicatio
CVE-2026-65894
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacke