ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an att...

CVE-2026-65309

ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible form

历史摘要 · 未重新核验 · NVD

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.

CVE-2026-56582

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sen

历史摘要 · 未重新核验 · NVD

SurrealDB before 3.1.0 silently substitutes the ES384 algorithm when a JWT access method is configured with ALGORITHM ES512 (DEFINE ACCESS ... TYPE JWT ALGORITHM ES512), because...

CVE-2026-63761

SurrealDB before 3.1.0 silently substitutes the ES384 algorithm when a JWT access method is configured with ALGORITHM ES

历史摘要 · 未重新核验 · NVD

HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws tha...

CVE-2026-56454

HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function...

CVE-2026-15605

A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the componen...

CVE-2026-15605

CVE-2026-15605 是 wandb 0.25.2.dev1 版本中 Artifact Integrity Validation 组件的一个安全漏洞。漏洞位于 wandb/sdk/lib/hashutil.py 文件中的 Artif

历史摘要 · 未重新核验 · NVD

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, the CoreWCF WS-Security 1.0 receive pipeline validates ds...

CVE-2026-54780

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · NVD

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

CVE-2026-54780

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · OSV.dev

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

### Am I affected? Users are affected if all of the following are true: - Their application uses `better-auth` at a ve

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function...

CVE-2026-14738

A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the fi

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the...

CVE-2026-14742

A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of th

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the file libs/langgraph/langgraph/_internal/_cache.py of th...

CVE-2026-14742

A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of th

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the file src/exo/worker/engines/mlx/vision.py of the component ...

CVE-2026-14738

A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the fi

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this...

CVE-2026-14630

A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the functio

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the function get_conversation_history of the file 08_agentic_system/...

CVE-2026-14630

A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerability is the functio

历史摘要 · 未重新核验 · NVD

Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding

CVE-2026-50268

### Summary Configuring `encrypt:rsa:algorithm=OAEP` does not enable OAEP encryption. Due to an incorrect BouncyCastle

历史摘要 · 未重新核验 · GitHub Advisory

SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation

When a user configures `ALGORITHM ES512` for any JWT access method (`DEFINE ACCESS ... TYPE JWT ALGORITHM ES512`), Surre

历史摘要 · 未重新核验 · GitHub Advisory

Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions...

CVE-2026-57997

Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not exp

历史摘要 · 未重新核验 · GitHub Advisory

Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, allowing acceptance of HS384 and HS51...

CVE-2026-57997

Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not exp

历史摘要 · 未重新核验 · NVD

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an...

CVE-2026-13510

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in

历史摘要 · 未重新核验 · GitHub Advisory