CakePHP Authentication: Open redirect weakness via backslash bypass
CVE-2026-55590
### Impact The `getLoginRedirect()` method contains a weakness to backslash bypasses allowing redirect targets with atta
#severity:medium
共收录 5584 条相关情报。
← 返回所有主题Deno: Denial of service via non-ASCII bytes in WebSocket response headers
CVE-2026-55517
## Summary A Deno program that opens a client `WebSocket` connection could be crashed by the remote server. While handl
Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark...
CVE-2026-48591
Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security...
CVE-2026-30799
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identit
A vulnerability in the browser-based version of Cisco Webex App could have allowed an...
CVE-2026-20178
A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker t
A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could...
CVE-2026-20220
A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenti
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security...
CVE-2026-2675
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake th
Out-of-bounds Write, Out-of-bounds Write, Out-of-bounds Write vulnerability in RTI Connext...
CVE-2026-2674
Out-of-bounds Write, Out-of-bounds Write, Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Servic
A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where...
CVE-2026-12515
A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization chec
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special...
CVE-2026-35069
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special Elements used in an SQL
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin"...
CVE-2026-20265
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the "admin" or "power" Splunk roles
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk...
CVE-2026-1288
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL
A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an...
CVE-2026-20246
A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to e
Dell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An...
CVE-2025-32748
Dell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An unauthenticated attack
Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic...
CVE-2026-40641
Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control...
CVE-2026-35067
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have...
CVE-2026-55748
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control...
CVE-2026-35162
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When...
CVE-2026-48142
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or p
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API...
CVE-2026-54817
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recover