共收录 416 条相关情报。
← 返回所有主题CVE-2026-63115
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo` handle
CVE-2026-119289
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...)
CVE-2026-93008
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME targ
CVE-2026-115910
### Summary The generic OpenID Connect backend (`OpenIdConnectAuth` and every backend built on it) stores the `nonce` i
CVE-2026-110985
A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidat
CVE-2026-110952
A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies
CVE-2026-103402
An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Ses
CVE-2026-103330
The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifi
CVE-2026-103313
The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confi
CVE-2026-118377
mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthentica
CVE-2026-118377
mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthentica
CVE-2026-104381
A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthentica
CVE-2026-115408
In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions
CVE-2026-103359
The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming pay
CVE-2026-116608
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function
CVE-2026-116608
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function
CVE-2026-115910
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_co
CVE-2026-116254
A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the
CVE-2026-115937
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong
CVE-2026-114437
### Summary `ClientIPFromXFF` skips any `X-Forwarded-For` entry in a configured trusted CIDR but never verifies that th