#cwe-200

共收录 1721 条相关情报。

漏洞预警2026-09-15 发布INFO

vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enumerate all teams and members. Attackers can attach arbitr...

CVE-2026-91980

vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enu

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/calendar.json.php endpoints. Unauthenticated attackers can re...

CVE-2026-91965

WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin/Live/cale

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an una...

CVE-2026-87792

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_g

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

漏洞预警2026-09-15 发布INFO

GeoLens is a self-hosted geospatial data catalog with semantic search, OGC and STAC APIs, and a map builder. Prior to 1.2.3, multiple read and link endpoints authorize only the ...

CVE-2026-55178

GeoLens is a self-hosted geospatial data catalog with semantic search, OGC and STAC APIs, and a map builder. Prior to 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-639 #cwe-862

漏洞预警2026-09-15 发布INFO

Cyberdrop-DL is a bulk asynchronous downloader for multiple file hosts. From 8.5.0 until 9.14.0, the Pixeldrain crawler uses substring host matching instead of requiring the inp...

CVE-2026-54254

Cyberdrop-DL is a bulk asynchronous downloader for multiple file hosts. From 8.5.0 until 9.14.0, the Pixeldrain crawler

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200

漏洞预警2026-09-15 发布INFO

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4, manager/router/router.go registers GET /api/v1/oauth and GET /api/v1/oauth...

CVE-2026-49254

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4, manager/router/ro

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privile...

CVE-2026-45048

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-285

漏洞预警2026-09-15 发布INFO

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public AJAX actions, allo...

CVE-2026-18232

The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its shortcodes, allowing users with a role as low as Contributor...

CVE-2026-16592

The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its sho

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu...

CVE-2026-15758

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensit

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Executing a manipulation...

CVE-2026-90881

A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-09-14 发布INFO

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be a...

CVE-2026-86895

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-14 发布INFO

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27.

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-14 发布INFO

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to lea...

CVE-2026-84586

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-14 发布INFO

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

CVE-2026-84576

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-14 发布INFO

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has ...

CVE-2026-64761

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. A

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-14 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, vi...

CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadO

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-14 发布INFO

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta...

CVE-2026-43664

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPad

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-11 发布INFO

Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mousehole's HTTP/WebSocket management boundary is reachable w...

CVE-2026-50025

Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mous

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306 #cwe-346 #cwe-352 #cwe-862

漏洞预警2026-09-11 发布INFO

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-por...

CVE-2026-49463

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-285