共收录 97 条相关情报。
← 返回所有主题CVE-2026-18963
A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity
CVE-2026-15689
Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Ho
CVE-2026-15689
Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Ho
CVE-2026-12949
The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authent
CVE-2026-72856
Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner
CVE-2026-72856
Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner
CVE-2026-66691
Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.
CVE-2026-61967
Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.
CVE-2026-12571
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.
CVE-2026-72772
n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login feature. When
CVE-2026-19361
A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode o
CVE-2026-19361
A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode o
CVE-2026-14364
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via imp
CVE-2026-62517
Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-62486
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-53595
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public
CVE-2026-56308
Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification
CVE-2026-56308
Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification
CVE-2026-56308
Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification
CVE-2026-15479
A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file