共收录 97 条相关情报。
← 返回所有主题CVE-2026-100870
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the r
CVE-2026-100870
Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the r
CVE-2026-93340
Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote
CVE-2026-93340
Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote
CVE-2026-93453
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing u
CVE-2026-93453
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing u
CVE-2026-14850
The password reset funcionality is vulnerable to unauthorized account modification due to improper validation of the use
CVE-2026-81905
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password re
CVE-2026-81905
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password re
CVE-2026-6285
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/L
CVE-2026-84699
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset
CVE-2026-84699
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset
CVE-2026-80196
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after passwo
CVE-2026-82487
A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part. Executing a manipulation can
CVE-2026-82487
A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part. Executing a manipulation can
CVE-2026-55207
## Summary An unauthenticated attacker takes over any Pimcore admin account by sending a password reset request with an
CVE-2026-80196
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after passwo
CVE-2026-19632
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive In
CVE-2026-80196
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after passwo
CVE-2026-77264
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulne