共收录 336 条相关情报。
← 返回所有主题CVE-2026-119331
Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet
CVE-2026-7005
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows at
CVE-2026-119285
Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain
CVE-2026-61546
AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard appli
CVE-2026-118657
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers fr
CVE-2026-118651
Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP hea
CVE-2026-115413
Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allo
CVE-2026-109829
### Impact When an originless `Agent` composes the redirect and cache interceptors as `compose(redirect(), cache())` wi
CVE-2026-82332
An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allow
CVE-2026-110737
The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allo
CVE-2026-82121
Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01
CVE-2026-116254
A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the
CVE-2026-116194
Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost O
CVE-2026-116194
Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost O
CVE-2026-109461
### Impact Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attack
CVE-2026-83813
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.name
CVE-2026-113798
### Impact For `pointerLock` permission requests made from some cross-origin iframes, `session.setPermissionRequestHandl
CVE-2026-114121
### Impact Requests to open external protocol URLs could be attributed to a document other than the one that asked for t
CVE-2026-112085
webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 a
CVE-2026-114125
Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19,