#cwe-284

共收录 1962 条相关情报。

← 返回所有主题

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high p...

CVE-2026-101376

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low pr...

CVE-2026-101375

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows ...

CVE-2026-101374

Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged at...

CVE-2026-101373

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low pr...

CVE-2026-101364

Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticate...

CVE-2026-101363

Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated ...

CVE-2026-101362

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. D

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged a...

CVE-2026-101361

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. D

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged att...

CVE-2026-101360

Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. E

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated user with import access to a target type can supp...

CVE-2026-113662

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-943

漏洞预警2026-10-20 发布INFO

A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-I...

CVE-2026-113507

A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/pu

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-10-20 发布INFO

Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative browser URL in safeModulePaths in...

CVE-2026-112946

Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-284

漏洞预警2026-10-20 发布INFO

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component comm...

CVE-2026-113393

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-20 发布HIGH

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain acce...

CVE-2026-34485

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated atta

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api_plugins.php of the...

CVE-2026-113382

A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArch

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-20 发布HIGH

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.

CVE-2026-86948

This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An a

来源摘录 · NVD

#cve #cwe-284 #cwe-693 #cwe-829

漏洞预警2026-10-20 发布MEDIUM

A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may ...

CVE-2026-84582

A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Gold

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An ap...

CVE-2026-84508

This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, m

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to ac...

CVE-2026-65379

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-10-20 发布INFO

An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sens...

CVE-2026-65356

An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia

历史摘要 · 未重新核验 · NVD

#cve #cwe-284