A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function...
CVE-2026-82542
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the fi
#severity:critical
共收录 1465 条相关情报。
← 返回所有主题The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to...
CVE-2026-15980
The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5.
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to...
CVE-2026-15369
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versio
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file...
CVE-2026-82460
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoint
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route...
CVE-2026-82466
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions...
CVE-2026-82456
argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller c
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where...
CVE-2026-82452
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lac
The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication...
CVE-2026-82454
The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in toke
Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that...
CVE-2026-82448
Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated
The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions...
CVE-2026-14494
The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of...
CVE-2026-77012
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated end
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate...
CVE-2026-16947
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path b
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified...
CVE-2026-16259
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthentic
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary...
CVE-2026-19295
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due...
CVE-2026-19286
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcemen
IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send...
CVE-2026-3627
IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL state
IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could...
CVE-2026-18527
IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker t
The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the...
CVE-2026-80203
The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the requireNotSuperTarget() function
JFrog Artifactory contains an authentication weakness that, under default configuration, may...
CVE-2026-82329
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated at
Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name
CVE-2026-55634
## Overview A DataObject **class-definition field name** is concatenated, without an identifier allowlist, into the PHP