#cwe-284

共收录 1981 条相关情报。

← 返回所有主题
漏洞预警2026-07-10 发布INFO

Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate to full tree-path access by renaming themselves to __inter...

CVE-2026-40009

Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-10 发布INFO

A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool._do_navigate of the file agent/tools/browser/browser_tool.py of the compo...

CVE-2026-15329

A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool._do_navigate of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-10 发布INFO

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the comp...

CVE-2026-15319

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and make arbitrary changes to port forwarding rules.

CVE-2025-45422

Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and mak

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed ...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The secu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.ts does not persist the isPublic input field while schema....

CVE-2026-59720

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.t

历史摘要 · 未重新核验 · NVD

安全公告2026-07-09 发布INFO

Hoppscotch: Insecure Default Configuration Allows Public Exposure of Private Collection Data via Mock Server

CVE-2026-59720

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.t

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-09 发布INFO

A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affected by this vulnerability is the function EditEmployeeProf...

CVE-2026-15188

A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affect

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...

CVE-2026-58525

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-08 发布INFO

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-58525

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped API keys to downgrade encrypted bundles to non-encrypted s...

CVE-2026-56217

Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped A

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update

CVE-2026-56217

Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped A

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-07 发布INFO

An improper access check allows users to display a list of modules in the frontend.

CVE-2026-48956

An improper access check allows users to display a list of modules in the frontend.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-07 发布INFO

An improper access check allows unauthorized users to access com_privacy datasets.

CVE-2026-48957

An improper access check allows unauthorized users to access com_privacy datasets.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-07 发布INFO

An improper access check allows unauthorized users to create custom fields via webservices...

CVE-2026-48958

An improper access check allows unauthorized users to create custom fields via webservices endpoints.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-07 发布INFO

An improper access check allows unauthorized users to access workflow stage and transition...

CVE-2026-48955

An improper access check allows unauthorized users to access workflow stage and transition information.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-07 发布INFO

An improper access check allows user to download vcard exports of com_contact contacts that are...

CVE-2026-48948

An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-07 发布INFO

An improper access check allows privileged users to overwrite media files without editing...

CVE-2026-48947

An improper access check allows privileged users to overwrite media files without editing permissions.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-07 发布INFO

An improper access check allows unauthorized users to create custom fields via webservices endpoints.

CVE-2026-48958

An improper access check allows unauthorized users to create custom fields via webservices endpoints.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-07 发布INFO

An improper access check allows unauthorized users to access com_privacy datasets.

CVE-2026-48957

An improper access check allows unauthorized users to access com_privacy datasets.

历史摘要 · 未重新核验 · NVD