共收录 32 条相关情报。
← 返回所有主题CVE-2026-119429
phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remov
CVE-2026-118984
OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or adm
CVE-2013-20008
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administra
CVE-2013-20008
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administra
CVE-2026-97380
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
CVE-2026-102603
The password change endpoint (`POST /current/user/password`) in Gotify versions <= 2.9.1 does not require knowledge of t
CVE-2026-102603
Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the pass
CVE-2026-102603
Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the pass
CVE-2026-105785
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Jopli
CVE-2026-91995
pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verif
CVE-2026-46623
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth2 authentication module upda
CVE-2026-85591
phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint tha
CVE-2026-85591
phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint tha
CVE-2026-77644
CVE-2026-77644是针对PTC Windchill Risk and Reliability (WRR) Enterprise Edition的一个严重绕过访问控制漏洞。该漏洞由NVD收录，标题明确指出其严重性质，但尚未提供CVS
CVE-2026-76633
WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authentica
CVE-2026-73292
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/password endpoint accep
CVE-2026-17599
Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. Th
CVE-2026-17599
Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. Th
CVE-2026-15964
The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password rese
CVE-2026-15964
The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password rese