#cwe-284

共收录 2028 条相关情报。

漏洞预警2026-06-02 发布INFO

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete...

CVE-2026-9522

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-02 发布INFO

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access control allows disclosure of password hash. This issue has ...

CVE-2026-45080

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access co

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-06-02 发布INFO

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4...

CVE-2026-7198

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unaut

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:critical

漏洞预警2026-06-02 发布INFO

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be rest...

CVE-2026-7198

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unaut

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-02 发布INFO

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLER...

CVE-2026-3198

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'l

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布HIGH

In resolveContentProvider of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escalation of pr...

CVE-2025-22426

In resolveContentProvider of ComputerEngine.java, there is a possible way to access URIs across users due to a logic err

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.

CVE-2026-9614

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where provided by LDAP to still auth...

CVE-2026-45284

Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper chec

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can...

CVE-2026-45282

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association. The validation function valid_xapp_id() only checks that t...

CVE-2026-37235

FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affects the function saveToDisk of the file src/tools/gmail.ts ...

CVE-2026-10277

A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. Prior to versions 21.1.10, 22.0.11, and 23.0.3, a low-privileged user can force other user's microphones to be muted ...

CVE-2026-45266

Nextcloud is an open source content collaboration platform. Prior to versions 21.1.10, 22.0.11, and 23.0.3, a low-privil

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. From versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11,...

CVE-2026-45264

Nextcloud is an open source content collaboration platform. From versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a malicious user has acc...

CVE-2026-45157

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was share...

CVE-2026-45154

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-01 发布INFO

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function sell_statement of the file application/c...

CVE-2026-10255

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

安全公告2026-06-01 发布INFO

A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element...

CVE-2026-10205

A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function o

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:low

漏洞预警2026-06-01 发布INFO

A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function of the file develop/systparam/softlogo/upload.jsp. Such ma...

CVE-2026-10205

A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function o

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

安全公告2026-05-31 发布INFO

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The...

CVE-2026-10172

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the f

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-284 #severity:low

漏洞预警2026-05-31 发布INFO

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/...

CVE-2026-10172

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434