#cwe-284

共收录 1965 条相关情报。

← 返回所有主题

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entries via sending a ...

CVE-2026-51732

Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST reque...

CVE-2026-51731

Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resource Assignment Handl...

CVE-2026-82818

A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/r

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

安全公告2026-08-31 发布INFO

Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015...

CVE-2026-51730

Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:critical

漏洞预警2026-08-31 发布INFO

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Managemen...

CVE-2026-82817

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-08-31 发布INFO

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument...

CVE-2026-82815

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi ACL rules via sending a crafted PO...

CVE-2026-51730

Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sendin...

CVE-2026-51729

Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve administrative import and export endpoi...

CVE-2026-51727

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove parental-control rules via sending a cr...

CVE-2026-51726

Incorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device clock via sending a crafted P...

CVE-2026-51725

Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener o...

CVE-2026-82810

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is th

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the function window.addEventListener of the component postMe...

CVE-2026-82809

A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 - The AJAX endpoint save-megamenu-settings fail...

CVE-2026-78076

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated...

CVE-2026-78074

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extension

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a craft...

CVE-2026-51681

Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST reques...

CVE-2026-51680

Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the administrator account via sending a c...

CVE-2026-51679

Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBas...

CVE-2026-82679

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434