共收录 19 条相关情报。
← 返回所有主题CVE-2026-119128
ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticat
CVE-2026-118661
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 20.14.6, Happy
CVE-2026-112352
Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote att
CVE-2026-111749
### Summary A subdomain can remove the Host-Only flag from an existing cookie to a parent domain. ### Impact A user a
CVE-2026-76186
Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed Air
CVE-2026-69215
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unan
CVE-2026-69215
The `CookieJar` client middleware decides whether to attach a cookie to an outgoing request using an unanchored substrin
CVE-2026-69214
When processing a `Set-Cookie` from a response, the `CookieJar` client middleware trusts the server-supplied `Domain` at
CVE-2026-69214
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware stores a
CVE-2026-85181
CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attac
CVE-2026-85181
CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attac
CVE-2026-75757
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker wh
CVE-2026-75757
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker wh
CVE-2026-53871
Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that ac
CVE-2026-53871
Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that ac
CVE-2026-8337
Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would have to be configured in s
CVE-2026-8337
Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would have to be configured in s
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software all
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software all