#cwe-284

共收录 1981 条相关情报。

← 返回所有主题
漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Difficult to exploit vulnerability ...

CVE-2026-61202

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affecte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Diffi...

CVE-2026-61201

Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects).

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Eas...

CVE-2026-61200

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Sup

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0...

CVE-2026-61197

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vu...

CVE-2026-56746

Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execut...

CVE-2026-43945

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthent

历史摘要 · 未重新核验 · NVD

安全公告2026-07-21 发布INFO

Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

CVE-2026-58429

### Summary A personal access token restricted with the public-only scope can still retrieve private organization member

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-21 发布INFO

Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts

CVE-2026-58422

### Summary The OAuth2 sign-in callback in Gitea 1.26.1 unconditionally re-enables a locally-disabled account whenever

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-21 发布INFO

Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private

CVE-2026-24451

### Summary The `POST /api/v1/repos/{owner}/{repo}/merge-upstream` endpoint continues to synchronize commits from a par

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-21 发布INFO

Netty has a Security Control Bypass via CORS Short-Circuit Failure

CVE-2026-56746

Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-21 发布INFO

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

CVE-2026-43945

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthent

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-21 发布INFO

Gitea: Repository Visibility Manipulation via Git Push Options

CVE-2026-58437

### Repository Visibility Manipulation via Git Push Options | Field | Value | |-------|-------| | **Affected File** | `

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-21 发布INFO

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a broken workspace authorization check that allows any authenti...

CVE-2026-47405

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have a brok

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the workspace-scoped REST routes contain a systemic object-level aut...

CVE-2026-47399

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the workspa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE-862) has been identified in the Direct Device Integration (DDI) Controller. T...

CVE-2026-16454

In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE-862) has been identifie

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This impacts an unknown function of the file /api/system/file/upload ...

CVE-2026-16451

A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This impacts

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-facing agent control API without authentication when `CALL_SERVER_TOK...

CVE-2026-47396

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call server exposes a network-facing agent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute ...

CVE-2026-28321

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows ...

CVE-2026-28307

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is low...

CVE-2026-28306

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate thei

历史摘要 · 未重新核验 · NVD