#cwe-284

共收录 1981 条相关情报。

漏洞预警2026-08-18 发布INFO

A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allo...

CVE-2026-66780

A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to jo

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as Express middleware, while the Socket.IO server in js/serve...

CVE-2026-63641

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as E

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects contact informati...

CVE-2026-73372

Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to...

CVE-2026-72531

Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterprise Google Chrome device-trust stages advance the flow without confirming that the out-...

CVE-2026-54730

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterprise Google Chrome device-trust

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-807

漏洞预警2026-08-18 发布INFO

Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy ba...

CVE-2026-73371

Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to crea...

CVE-2026-72532

Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - A

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to ...

CVE-2026-71574

Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with WebDAV enabled (`-w`), the mode-restriction flags `--read-only`, `--upload-only`...

CVE-2026-50138

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when `goshs` is launched with WebDAV enabled (`-w`),

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74979

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thun

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-18 发布INFO

A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse/core...

CVE-2024-14046

A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-08-17 发布INFO

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies t...

CVE-2026-42163

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoper

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-17 发布INFO

An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (s...

CVE-2026-68004

An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP pub

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

安全公告2026-08-16 发布INFO

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that...

CVE-2026-73061

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:critical

漏洞预警2026-08-16 发布INFO

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility c...

CVE-2026-73061

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code t

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-16 发布MEDIUM

A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipul...

CVE-2026-19918

CVE-2026-19918 影响 SpaceX Starlink Router Gen 3（固件版本 2025.11.14.mr64708.3）。该漏洞位于设备的 gRPC 管理接口中，具体涉及 get_status 函数。由于该函数对访

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

安全公告2026-08-14 发布INFO

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 -...

CVE-2026-71570

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator gra

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:medium

漏洞预警2026-08-14 发布LOW

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate...

CVE-2026-71570

该漏洞影响Joomla扩展icagenda，版本低于2.0.0-4.0.11（具体版本范围待确认）。漏洞类型为ACL绕过，允许后台操作员绕过访问控制限制。一个被授予仅限'com_icagenda'组件访问权限的后台用户，能够利用此漏洞枚举J

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

安全公告2026-08-14 发布INFO

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue...

CVE-2026-19839

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function sa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:low

漏洞预警2026-08-14 发布INFO

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function save_doctor of the file /save_file.php. The manipulation re...

CVE-2026-19839

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function sa

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434