共收录 231 条相关情报。
← 返回所有主题CVE-2026-63400
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the passwo
CVE-2026-116251
pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own chang
CVE-2026-119577
ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access thro
CVE-2026-9705
### Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously i
CVE-2026-118665
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the Gr
CVE-2026-6647
In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for i
CVE-2026-3583
When the `allowed_scopes` configuration is enabled, the OAuth2 token introspection mechanism does not immediately invali
CVE-2026-117499
@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavi
CVE-2026-116894
REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account a
CVE-2026-107146
The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Du
CVE-2026-96616
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any r
CVE-2026-115362
OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method, leavi
CVE-2026-54238
Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to version 2.103.1, the REST
CVE-2026-114137
Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framewor
CVE-2026-114137
Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framewor
CVE-2026-89035
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attac
CVE-2025-0326
The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account ma
CVE-2025-36252
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate
CVE-2025-36069
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an auth
CVE-2025-36252
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate