共收录 97 条相关情报。
← 返回所有主题CVE-2026-119127
ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticate
CVE-2026-115973
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword
CVE-2026-115973
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword
CVE-2026-58202
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver
CVE-2026-46347
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version
CVE-2026-86055
Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds
CVE-2026-43845
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CVE-2026-112035
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message
CVE-2026-108335
When the password reset functionality is enabled, and email is configured, an attacker could take over any account using
CVE-2026-108337
An administrator could retrieve the password reset code for any user and take over the account. The password reset co
CVE-2026-53997
Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 contains a broken authentication vulnerability in i
CVE-2026-109204
LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet tha
CVE-2026-108737
Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tok
CVE-2026-108737
Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tok
CVE-2026-105785
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Jopli
CVE-2026-53953
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio
CVE-2026-102115
Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attac
CVE-2026-101188
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd
CVE-2026-101188
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd
CVE-2026-100870
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the r