#cwe-284

共收录 2028 条相关情报。

← 返回所有主题
漏洞预警2026-06-23 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated user attach arbitrary file_id...

CVE-2026-54010

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open

历史摘要 · 未重新核验 · NVD

安全公告2026-06-22 发布INFO

Budibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF

CVE-2026-50132

## Title **Chat Identity Link Hijacking — Attacker Can Silently Map Their Slack/Discord Identity to Any Authenticated B

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-22 发布INFO

motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

CVE-2026-31978

### Summary motionEye v0.43.1 (latest stable) is vulnerable to path traversal in the picture and movie API endpoints, l

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-22 发布INFO

OpenCTI May Bypass Introspection Restriction

CVE-2024-37155

### Summary The regex validation used to prevent Introspection queries can be bypassed by removing the extra whitespace

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-21 发布INFO

Capgo before 12.128.2 contains an improper access control vulnerability in the public...

CVE-2026-56253

Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-21 发布INFO

Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that allows unauthenticated attackers to enumerate organizatio...

CVE-2026-56253

Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the compone...

CVE-2026-12786

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA_NTDRV.sys of the component Kernel Driver. This mani...

CVE-2026-12784

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the librar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver...

CVE-2026-12782

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The...

CVE-2026-12781

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulati...

CVE-2026-12780

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Perfo...

CVE-2026-12779

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-21 发布INFO

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such...

CVE-2026-12778

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in th

历史摘要 · 未重新核验 · NVD

安全公告2026-06-20 发布INFO

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the...

CVE-2026-48939

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-20 发布INFO

A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for...

CVE-2026-48908

A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultima

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-20 发布INFO

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

CVE-2026-48939

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-20 发布INFO

A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultimately resulting in PHP code upload and execution.

CVE-2026-48908

A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultima

历史摘要 · 未重新核验 · NVD

安全公告2026-06-20 发布INFO

Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the...

CVE-2026-56082

Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-19 发布HIGH

Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC function public.record_build_time, which is granted ...

CVE-2026-56082

Capgo(项目 Cap-go/capgo)12.128.2 之前版本中存在不当访问控制漏洞。漏洞位于 PostgREST RPC 函数 public.record_build_time 中,该函数被定义为 SECURITY DEFINER

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-19 发布INFO

A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control.

CVE-2026-4027

A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized acces

历史摘要 · 未重新核验 · NVD