#cwe-284

共收录 1962 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布INFO

Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and inv...

CVE-2026-102789

Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorCon

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC...

CVE-2026-116809

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unaut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown...

CVE-2026-116603

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file adm

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unauthenticated attackers to read bot events by only checking ...

CVE-2026-116809

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unaut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument...

CVE-2026-116603

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file adm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation ...

CVE-2026-116507

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may be able to access sensitive user data.

CVE-2026-112618

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, vision

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/server/ajax/settings.py of the component API Key Handler. This...

CVE-2013-10077

A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/serve

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information dis...

CVE-2026-116283

A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the comp

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin_init of the file /tmp/upload_files of the component PPPoE WAN Setti...

CVE-2026-116236

A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin_init of th

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manip...

CVE-2026-116106

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unkno

来源摘录 · NVD

安全公告2026-10-25 发布INFO

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability...

CVE-2026-116057

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-25 发布MEDIUM

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the ...

CVE-2026-116057

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown function

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the ...

CVE-2026-116044

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unkn

来源摘录 · NVD

安全公告2026-10-24 发布INFO

The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings...

CVE-2026-113674

The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-ou

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-24 发布INFO

The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a...

CVE-2026-87835

The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the...

CVE-2026-106073

A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not...

CVE-2026-106071

A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布HIGH

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.type. At...

CVE-2026-115376

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restr

来源摘录 · NVD

漏洞预警2026-10-22 发布INFO

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Su...

CVE-2026-114574

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/

历史摘要 · 未重新核验 · NVD