共收录 416 条相关情报。
← 返回所有主题CVE-2026-73840
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, the POST
CVE-2026-73657
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4,
CVE-2026-73840
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, the POST
CVE-2026-28185
Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.
CVE-2026-14663
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of
CVE-2026-73419
NextAuth.js provides authentication for Next.js. Prior to@auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, Auth
CVE-2026-69105
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affe
CVE-2026-18044
The Estatik Real Estate Plugin WordPress plugin before 4.3.4 does not validate the same recipient list that it later use
CVE-2026-62869
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over
CVE-2025-31356
Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: H
CVE-2026-72544
An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers
CVE-2026-71965
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote b
CVE-2026-71965
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote b
CVE-2026-71576
A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming
CVE-2026-71576
A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming
CVE-2026-21078
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows ad
CVE-2026-58262
CVE-2026-58262 是 Klever-Go（Klever 区块链协议的 Go 实现）中存在于 1.7.20 之前版本的一个共识安全漏洞。漏洞根因在于区块头签名验证逻辑错误地将 PubKeysBitmap 中未使用的填充位计入了验证
CVE-2026-47664
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior
CVE-2026-15239
The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 does not bind its Turnstile validation cache
CVE-2026-15211
The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not validate the payment amount or bind the PayPal