The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately...
CVE-2026-77967
The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshnes
#severity:high
共收录 5373 条相关情报。
← 返回所有主题The Botslab G980H dash camera firmware contains an authorization vulnerability in its session...
CVE-2026-84399
The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionalit
The Botslab G980H dash camera firmware contains a session management vulnerability in which...
CVE-2026-82566
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can rem
Improper handling of sensitive data during IPsec policy creation and modification in Brocade...
CVE-2026-82372
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.
Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission...
CVE-2026-82164
Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resourc
The Botslab G980H dash camera firmware contains an authentication vulnerability in the root...
CVE-2026-88956
The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files...
CVE-2026-82371
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals wi
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing...
CVE-2026-81455
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization...
CVE-2026-81473
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper...
CVE-2026-82157
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerabil
ServiceNow has remediated an authorization bypass security issue that was identified in the...
CVE-2026-86859
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This
ServiceNow has remediated an improper access control security issue that was identified in the...
CVE-2026-86858
ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. T
An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on...
CVE-2026-89325
An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, l
ServiceNow has remediated an authorization bypass security issue that was identified in the...
CVE-2026-86857
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This
An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint...
CVE-2026-13248
An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerabil
mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that...
CVE-2026-80347
mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSa
GROWI applies its page-viewer permission check to attachment requests only when the request...
CVE-2026-80191
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated use
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
CVE-2026-57178
### Impact The `vk-app` backend accepted VK application callback data without verifying the callback signature when the
Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)
CVE-2026-57171
**At a glance** - **Actor:** attacker who controls the -o/--output argument to trestle author {catalog,profile,ssp}-gen
Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
CVE-2026-57170
Reporter: Cavan Loughran, Celvex Group Inc. Summary ------- The fix for CVE-2026-46439 (3.12.2 / 4.0.3) removed the rec