AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid() values for RTMP publish keys in LiveTransmition, reducing key entropy to approximate...

CVE-2026-92912

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid() values for RTMP publish key

历史摘要 · 未重新核验 · NVD

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution (RCE) and tenant-p...

CVE-2026-19407

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an att

历史摘要 · 未重新核验 · NVD

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identi...

CVE-2026-84606

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS

历史摘要 · 未重新核验 · NVD

WWBN AVideo generates passwords for external-login accounts using rand() instead of a...

CVE-2026-86187

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing

历史摘要 · 未重新核验 · GitHub Advisory

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password ...

CVE-2026-86187

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing

历史摘要 · 未重新核验 · NVD

WWBN AVideo Weak PRNG Password Generation via External Login

CVE-2026-86187

WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing

历史摘要 · 未重新核验 · OSV.dev

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds.

CVE-2026-17274

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predicta

历史摘要 · 未重新核验 · NVD

The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG) to create shared secrets for Webhook HMAC validation. This PRNG lacks suffic...

CVE-2026-3416

The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG) to create shared se

历史摘要 · 未重新核验 · NVD

ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and...

CVE-2026-66047

ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerabi

历史摘要 · 未重新核验 · NVD

Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection....

CVE-2026-81852

Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce,

历史摘要 · 未重新核验 · NVD

AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass

CVE-2026-81852

Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce,

历史摘要 · 未重新核验 · OSV.dev

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecgi.cgi of the compo...

CVE-2026-82555

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAu

历史摘要 · 未重新核验 · NVD

Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication is vulnerable to login-co...

CVE-2026-62862

Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless

历史摘要 · 未重新核验 · NVD

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (format (rand XOR secret):rand), allowing anyone who observes ...

CVE-2026-56706

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (form

历史摘要 · 未重新核验 · NVD

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being authenticated are protected by a weak 24-bit pseudo-rando...

CVE-2026-27490

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are accessible without being

历史摘要 · 未重新核验 · NVD

Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

Fix: PR #7906 (ether/etherpad). A set of medium/low hardening fixes: - **Weak RNG for tokens (CWE-330):** author/sessio

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the...

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the componen...

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the

历史摘要 · 未重新核验 · NVD

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function build_secret_key of the file dtale/app.py of the component Flask Session Cookie. Th...

CVE-2026-19896

A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects the function build_secret_key of the fi

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C,...

CVE-2026-19748

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC

历史摘要 · 未重新核验 · GitHub Advisory