#cwe-284

共收录 1965 条相关情报。

← 返回所有主题
漏洞预警2026-08-22 发布INFO

NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making the security...

CVE-2026-65915

NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGal...

CVE-2026-66916

Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a ...

CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name ...

CVE-2026-55621

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipula...

CVE-2026-77681

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation and listAnnotation APIs perform an ow...

CVE-2026-66797

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache ...

CVE-2026-65613

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while lis

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and remov...

CVE-2026-62440

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant mani

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API route...

CVE-2026-16576

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly ch

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on an unauthenticated REST route, allowing anonymous visitors...

CVE-2026-13736

The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view us...

CVE-2026-43679

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physi

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges...

CVE-2026-66309

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

CVE-2026-66309

Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived...

CVE-2026-66788

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_menu....

CVE-2026-76995

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications ...

CVE-2026-76610

Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint la

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a manipulation of the...

CVE-2026-76800

A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dial

历史摘要 · 未重新核验 · NVD

安全公告2026-08-20 发布INFO

In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can...

CVE-2026-76345

In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head cluster

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Repre...

CVE-2026-76345

In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head cluster

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution (RCE) by...

CVE-2026-76313

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

历史摘要 · 未重新核验 · NVD