共收录 381 条相关情报。
← 返回所有主题CVE-2026-54724
Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted an unvalid
CVE-2026-13277
IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By
CVE-2026-15412
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attack
CVE-2026-90453
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Refe
CVE-2026-90453
CVE-2026-90453 是一个典型的开放重定向（Open Redirect，CWE-601）类漏洞，存在于某应用的文件上传处理逻辑中。根据 NVD 元数据描述，该文件上传处理程序在完成上传后会向已通过身份验证的客户端浏览器返回一个重定
CVE-2026-81913
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft
CVE-2026-54072
Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the `/autho
CVE-2026-88887
Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagin
CVE-2026-88882
Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images and charts b
CVE-2026-88881
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header whe
CVE-2026-88880
Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing mal
CVE-2026-88887
Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagin
CVE-2026-88882
Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images and charts b
CVE-2026-88881
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header whe
CVE-2026-88880
Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing mal
CVE-2026-8323
URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. Access Con
CVE-2026-84389
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM
CVE-2026-86351
Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with
CVE-2026-86351
Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with
CVE-2026-85676
Dub contains an open redirect vulnerability in the redir_url query parameter that is accepted on every short link withou