#cwe-284

共收录 1962 条相关情报。

← 返回所有主题

漏洞预警2026-09-23 发布INFO

The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to events the requesting user is permitted to read, so users w...

CVE-2026-91077

The Event Booking Manager for WooCommerce WordPress plugin before 5.7.3 does not restrict its event listing query to ev

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-23 发布INFO

The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price before building the ga...

CVE-2026-77765

The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

安全公告2026-09-23 发布INFO

A security flaw has been discovered in theRealSain Pixtream up to...

CVE-2026-95830

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:low

安全公告2026-09-23 发布INFO

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to...

CVE-2026-95820

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affecte

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:low

漏洞预警2026-09-23 发布INFO

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /post_upload.p...

CVE-2026-95830

A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue a

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-09-22 发布INFO

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of the file...

CVE-2026-95820

A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affecte

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

安全公告2026-09-22 发布INFO

Nuclei: Local File Read via Workflow File-Protocol Gate Bypass

CVE-2026-76804

A vulnerability in Nuclei's workflow template loader allows `file:` protocol templates to execute without the `-file` fl

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-284 #severity:medium

安全公告2026-09-22 发布INFO

Nuclei: Local File Read via MySQL Client Sandbox Bypass

CVE-2026-76803

A vulnerability in Nuclei's JavaScript MySQL client library allows arbitrary local file reads that bypass the `-allow-lo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-284 #severity:medium

漏洞预警2026-09-22 发布INFO

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an unauthentica...

CVE-2026-76709

A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful explo

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-22 发布INFO

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the version com...

CVE-2026-95624

The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaS

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, caller-supplied projects_filter and spaces_filter arguments...

CVE-2026-77252

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-22 发布INFO

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This issue affects Connex...

CVE-2026-18462

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-190 #cwe-284

安全公告2026-09-22 发布INFO

MCP Atlassian: JIRA_PROJECTS_FILTER and CONFLUENCE_SPACES_FILTER can be bypassed in search tools

CVE-2026-77252

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ca

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-284

漏洞预警2026-09-22 发布INFO

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/web_api_v3.c with HTTP_ACL_NOCHECK and HTTP_ACCESS_AN...

CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-22 发布INFO

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the -file capability gate when r...

CVE-2026-76804

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loadi

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-22 发布INFO

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript library does not enforce the local-file sandbox when a J...

CVE-2026-76803

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

安全公告2026-09-22 发布INFO

Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK

CVE-2026-83602

Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-284

安全公告2026-09-22 发布INFO

Nuclei: Local File Read via Workflow File-Protocol Gate Bypass

CVE-2026-76804

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loadi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-284

安全公告2026-09-22 发布INFO

Nuclei: Local File Read via MySQL Client Sandbox Bypass

CVE-2026-76803

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-284

漏洞预警2026-09-22 发布INFO

A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function file_put_contents of the file codeEditor.php of the component...

CVE-2026-95500

A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function file

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434