#cwe-284

共收录 1965 条相关情报。

漏洞预警2026-09-15 发布INFO

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID c...

CVE-2026-90851

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includ

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-09-14 发布INFO

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credential...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user d...

CVE-2026-84555

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Se

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bre...

CVE-2026-84535

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27...

CVE-2026-84491

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2026-65362

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

CVE-2026-64712

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access prote...

CVE-2026-43741

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

CVE-2026-28937

This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be a

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access co...

CVE-2026-19290

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-14 发布INFO

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules such as csv_reader and log_reader throug...

CVE-2026-54629

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtu

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73 #cwe-284 #cwe-552 #cwe-862

漏洞预警2026-09-14 发布INFO

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticated SQL from its MySQL-compatible server port to SQLite without rest...

CVE-2026-50006

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticated SQL fro

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-73 #cwe-284 #cwe-434 #cwe-862

漏洞预警2026-09-11 发布INFO

A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhi...

CVE-2026-47839

A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite oper

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-11 发布INFO

The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect ...

CVE-2026-86812

The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoint

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

安全公告2026-09-11 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could...

CVE-2026-81941

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:high

安全公告2026-09-11 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read...

CVE-2026-79725

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to imprope

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:medium

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of t...

CVE-2026-81941

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control.

CVE-2026-79725

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to imprope

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-10 发布INFO

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit th...

CVE-2026-81046

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-10 发布INFO

Capgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed through Supabase PostgREST. A holder of an ordinary Capgo full API key can inse...

CVE-2026-88864

Capgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed through Supabase Postg

历史摘要 · 未重新核验 · NVD

#cve #cwe-284