#cwe-284

共收录 1965 条相关情报。

← 返回所有主题
漏洞预警2026-09-07 发布INFO

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the func...

CVE-2026-86284

A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard...

CVE-2026-75168

An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated Kubernetes tenant to hijack or permanently destroy a...

CVE-2026-19274

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header...

CVE-2026-9186

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the component SQL Databa...

CVE-2026-85517

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms WordPress plugin before 3.15.2-specific capabili...

CVE-2026-80438

The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninj

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability....

CVE-2026-85147

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-04 发布INFO

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php...

CVE-2026-85401

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functional

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source...

CVE-2026-85147

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The...

CVE-2026-85208

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the fun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-03 发布INFO

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?a...

CVE-2026-85208

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller...

CVE-2026-85186

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. Prior to...

CVE-2026-53924

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repositor...

CVE-2026-85135

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::upload

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload

CVE-2026-85135

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::upload

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...

CVE-2026-20279

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file throug

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for...

CVE-2026-84651

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration d

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security revie...

CVE-2026-20279

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it ...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file throug

历史摘要 · 未重新核验 · NVD