#cwe-799

共收录 34 条相关情报。

← 返回所有主题
漏洞预警2026-09-04 发布INFO

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA pr...

CVE-2026-85586

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

CVE-2026-85586

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-19 发布INFO

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realip_remote_addr reads the first value of X-Forwarded-For ...

CVE-2026-54738

Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::rea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the file apps/web/server/auth.ts of the component Login Endpoi...

CVE-2026-75773

A vulnerability was found in karakeep-app karakeep up to 0.32.0. The affected element is the function authorize of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmauth/main.go of the component VMAuth Authentication Endpoin...

CVE-2026-19898

A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/auth.py of the component Login Endpoint. Such manipulation...

CVE-2026-19897

A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component L...

CVE-2026-19895

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor could b e a h...

CVE-2024-23565

HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic error in CheckRateLimitsMiddl...

CVE-2026-33434

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and abov

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Wazuh: Rate Limit Bypass via /events Endpoint

CVE-2026-33434

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and abov

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-06-15 发布INFO

Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Library allows Flooding. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26...

CVE-2026-5233

Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Library allows Flooding. This issu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown function of the file server/src/routes/pairing.ts of the component claim End...

CVE-2026-10216

A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布LOW

A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation l...

CVE-2026-7671

该漏洞影响 CodeWise 公司开发的 Tornet 电动滑板车移动应用(iOS/Android 版本 4.75)。漏洞位于 /TwoFactor 文件中的某个未知函数,存在“对过多认证尝试的限制不当”问题,即缺乏有效的暴力破解防护机制。

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc. PDKS allows Flooding. This issue affects PDKS: from V16.20200313 before VMYR_3.5.202...

CVE-2026-7402

Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc. PDKS allows Flooding. This

历史摘要 · 未重新核验 · NVD