#cwe-284

共收录 1962 条相关情报。

← 返回所有主题
漏洞预警2026-11-01 发布MEDIUM

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware....

CVE-2026-120192

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布MEDIUM

In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

CVE-2026-115828

In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when usi

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布HIGH

A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This vulnerability affects the function move_uploaded_file o...

CVE-2026-119620

A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. Thi

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database...

CVE-2025-8574

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `POST /api/agent_data_store/upload` in `backend/app/data...

CVE-2026-61708

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belong...

CVE-2026-75882

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with s

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v...

CVE-2026-59387

The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ en

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process b...

CVE-2026-119317

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task Plan Templates Store application. This vulnerability cou...

CVE-2026-6877

ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM – Task

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the h...

CVE-2026-119251

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin...

CVE-2026-103093

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulner

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote au...

CVE-2026-51905

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in su

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality ...

CVE-2026-90867

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes via supplying a not...

CVE-2026-107037

Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attac

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.

CVE-2026-107034

Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read ano

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-lis...

CVE-2026-107028

Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an export

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.

CVE-2026-103092

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated...

CVE-2026-107017

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers t

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.

CVE-2026-107015

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in anot

来源摘录 · NVD

漏洞预警2026-10-29 发布LOW

The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJAX handler, allowing users with the Contributor role and a...

CVE-2026-85007

The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJA

来源摘录 · NVD