#cwe-284

共收录 1981 条相关情报。

← 返回所有主题
漏洞预警2026-07-15 发布INFO

Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. IOCTL handlers including `TDE_IOCTL_INDEXIO_READ` an...

CVE-2026-14960

Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interf

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

Dash: Users can write to config despire permissions (OIDC tested)

CVE-2026-46485

Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated user

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-15 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This r...

CVE-2026-20150

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO login flow checked the IdP email_verified claim only for new-user creation and n...

CVE-2026-47164

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO login flow checked the

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

Vaultwarden: SSO Email Auto-Link Can Bind an Existing Local Account to an Attacker-Controlled IdP Identity

CVE-2026-47164

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO login flow checked the

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-14 发布INFO

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level ...

CVE-2026-36035

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Ser

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode

CVE-2026-54629

## Summary Anyquery's `server` mode lacks input sanitization and access control over its built-in SQLite virtual table m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-14 发布INFO

Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode

CVE-2026-54628

## Summary Anyquery's `server` mode does not restrict outbound HTTP requests initiated by its built-in SQLite virtual ta

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-14 发布INFO

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

CVE-2026-47301

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a ne

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode

CVE-2026-50006

## Summary Anyquery's `server` mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticat

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-14 发布INFO

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-56157

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

CVE-2026-50495

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50423

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-50418

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-50373

Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

CVE-2026-50335

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.

CVE-2026-55014

Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-50342

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-50325

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-50297

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD