5931 matches found
CVE-2026-71205
changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiting, failed-attempt counter, or lockout no rate-limiting library is present in requirements.txt. Because the entire application is protected by one shar...
EUVD-2026-53202
changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiting, failed-attempt counter, or lockout no rate-limiting library is present in requirements.txt. Because the entire application is protected by one shar...
CVE-2026-71205
The CVE-2026-71205 issue affects changedetection.io: the /login endpoint authenticates against a single shared password using PBKDF2-HMAC-SHA256 with no per-IP or per-session rate limiting, no failed-attempt counter, and no lockout. This effectively provides unlimited brute-force opportunities, a...
WordPress Single Sign On For TNG plugin <= 2.0.0 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by andrea bocchetti in WordPress Plugin Single Sign On For TNG versions = 2.0.0...
CVE-2026-60023: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Deleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing...
CLSA-2026-1784943177 TuxCare security update for 8 packages (1 CVE)
TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 3.6.5-tuxcare.5...
CLSA-2026-1784943129 TuxCare security update for 12 packages (1 CVE)
TuxCare rebuilt 12 packages to address 1 CVE. Fixed in 7.5.1-tuxcare.8...
CLSA-2026-1785117465 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.2.15-tuxcare.2...
CLSA-2026-1771894652 TuxCare security update for symfony/process (1 CVE)
TuxCare rebuilt symfony/process to address 1 CVE. Fixed in 5.4.45-p2+tuxcare...
CLSA-2026-1781657689 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 22 org.springframework packages to address 1 CVE. Fixed in 5.1.5.RELEASE-tuxcare.3...
CLSA-2026-1781484839 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 19 org.springframework.security packages to address 1 CVE. Fixed in 6.3.10-tuxcare.6...
CLSA-2026-1781225616 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post9+tuxcare...
CLSA-2026-1779670112 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.8.16-tuxcare.8...
CLSA-2026-1779151615 TuxCare security update for phpunit/phpunit (1 CVE)
TuxCare rebuilt phpunit/phpunit to address 1 CVE. Fixed in 4.8.10-p1+tuxcare...
CLSA-2026-1779065199 TuxCare security update for bn.js (1 CVE)
TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.12.2-tuxcare.1...
CLSA-2026-1778028237 TuxCare security update for cryptography (1 CVE)
TuxCare rebuilt cryptography to address 1 CVE. Fixed in 45.0.7.post2+tuxcare...
CLSA-2026-1776818200 TuxCare security update for eventsource (1 CVE)
TuxCare rebuilt eventsource to address 1 CVE. Fixed in 0.1.6-tuxcare.1...
CLSA-2026-1776040408 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 23 org.springframework packages to address 1 CVE. Fixed in 5.2.0.RELEASE-tuxcare.3...