#cwe-284

共收录 1965 条相关情报。

← 返回所有主题
漏洞预警2026-09-10 发布INFO

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.

CVE-2026-85545

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked authorization che...

CVE-2026-78084

Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at ch...

CVE-2026-19436

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card cou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows...

CVE-2026-50165

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Acc

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

alf.io has Improper Access Control for Organization Owners that Exposes System Secrets

CVE-2026-50165

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Acc

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-09 发布INFO

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Su...

CVE-2026-73789

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69282

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69273

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-69268

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 a...

CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS...

CVE-2026-26084

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2...

CVE-2026-22575

An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file controllers/pic.php. The manipulation resu...

CVE-2026-86666

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFi

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload

CVE-2026-86666

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFi

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-08 发布INFO

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. Th...

CVE-2026-86519

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /car

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/f...

CVE-2026-86512

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/M

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of th...

CVE-2026-86308

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f6138

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function Up...

CVE-2026-86305

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component ...

CVE-2026-86302

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/Attachmen...

CVE-2026-86285

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::ge

历史摘要 · 未重新核验 · NVD