#cwe-347
共收录 355 条相关情报。
← 返回所有主题 漏洞预警2026-06-03 发布INFO
CVE-2026-45614
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-03 发布INFO
CVE-2026-6873
An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.
`django.http.HttpRequest.get_signed_cookie` in
历史摘要 · 未重新核验 · NVD
安全公告2026-06-01 发布INFO
CVE-2026-47191
### Impact
When relying solely on a git commit ID (SHA-1 or SHA-256) to qualify if a checkout of a repository is equival
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-29 发布INFO
CVE-2026-47212
### Description
The Twilio SMS notifier bridge ships a webhook request parser used to authenticate and decode the statu
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-28 发布MEDIUM
CVE-2026-9793
CVE-2026-9793 是 Keycloak 中的一个中等严重性漏洞。Keycloak 是一个开源的身份和访问管理解决方案,广泛用于实现 OpenID Connect (OIDC) 和 SAML 协议。该漏洞存在于 JWE(JSON W
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-44720
OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2025-41669
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloade
历史摘要 · 未重新核验 · NVD
安全公告2026-05-26 发布INFO
CVE-2026-42462
### Summary
An attacker can make use of JSON-LD features to restructure a JSON-LD document that would change how Fedify
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-26 发布INFO
CVE-2026-45575
epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who
历史摘要 · 未重新核验 · NVD
安全公告2026-05-19 发布INFO
CVE-2026-46354
## Summary
`azureidentity.Validate()` verifies that the PKCS#7 signer certificate chains to a trusted Azure CA but neve
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-15 发布INFO
CVE-2026-45575
### Impact
An attacker who can MITM the TLS connection between the client and the IDP (within the TI network) can substi
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-15 发布INFO
CVE-2026-44714
The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends(
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-15 发布INFO
CVE-2026-44699
LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parame
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-15 发布INFO
CVE-2026-44309
Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. Prior to 0.16.0, gitsi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-15 发布INFO
CVE-2024-36334
Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the insta
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2026-42602
azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in
历史摘要 · 未重新核验 · NVD
安全公告2026-05-13 发布INFO
CVE-2026-0265
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with n
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-13 发布INFO
CVE-2026-0265
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with n
历史摘要 · 未重新核验 · NVD
安全公告2026-05-13 发布INFO
CVE-2026-44720
### Overview
A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-12 发布INFO
CVE-2026-33117
Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network.
历史摘要 · 未重新核验 · NVD