#cwe-284

共收录 1965 条相关情报。

← 返回所有主题
漏洞预警2026-09-01 发布INFO

Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending...

CVE-2026-51743

Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted P...

CVE-2026-51742

Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with two PolicyExceptions, the less restrictive excep...

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

AVideo contains a missing authentication vulnerability in plugin/Live/on_publish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by se...

CVE-2026-84187

AVideo contains a missing authentication vulnerability in plugin/Live/on_publish.php that allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

CVE-2026-84200

Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combi

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

AVideo on_publish.php Missing Authentication Check via RTMP Callback

CVE-2026-84187

AVideo contains a missing authentication vulnerability in plugin/Live/on_publish.php that allows unauthenticated attacke

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-01 发布INFO

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated us...

CVE-2026-84165

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer is used, because neither enforced pr...

CVE-2026-82745

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness

CVE-2026-82745

Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function...

CVE-2026-82921

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-31 发布INFO

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/pack.php. Executing a manipulation of the argument pack_i...

CVE-2026-82921

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument file...

CVE-2026-82835

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatic...

CVE-2026-82834

A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically ...

CVE-2026-82833

A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Label

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted P...

CVE-2026-51740

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger cloud update checks via sending a ...

CVE-2026-51739

Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase traceroute logs via sending a crafted ...

CVE-2026-51737

Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system logs via sending a crafted POST reques...

CVE-2026-51736

Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve recent system logs via sending a crafted PO...

CVE-2026-51735

Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger mesh slave update coordination via se...

CVE-2026-51734

Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a

历史摘要 · 未重新核验 · NVD