共收录 355 条相关情报。
← 返回所有主题CVE-2026-63182
LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate suppo
CVE-2026-46560
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module op
CVE-2026-119037
Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or e
CVE-2026-119561
phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionRespo
CVE-2026-118559
Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This is
CVE-2026-118774
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the
CVE-2026-118768
Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response
CVE-2026-88078
Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to p
CVE-2026-33923
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent valid
CVE-2026-110985
A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidat
CVE-2026-118040
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic
CVE-2026-87879
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Pr
CVE-2026-87103
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected:
CVE-2026-87102
Sensitive information disclosure and manipulation due to improper token validation. The following products are affected:
CVE-2026-87101
Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Pr
CVE-2026-106078
A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token an
CVE-2026-117602
Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __
CVE-2026-117601
Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing ma
CVE-2026-103325
The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its payme
CVE-2026-65632
The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifyin