#cwe-285

共收录 628 条相关情报。

← 返回所有主题

漏洞预警2026-09-04 发布INFO

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a...

CVE-2026-53602

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-862

漏洞预警2026-09-04 发布INFO

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. ...

CVE-2026-85638

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipula

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher.

CVE-2026-18175

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authoriza

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-09-04 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure.

CVE-2026-17483

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

安全公告2026-09-04 发布INFO

A security vulnerability has been detected in light0011 cms...

CVE-2026-85381

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a061

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-285 #severity:medium

漏洞预警2026-09-04 发布INFO

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown pr...

CVE-2026-85381

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a061

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

安全公告2026-09-04 发布INFO

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d...

CVE-2026-85378

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-285 #severity:medium

漏洞预警2026-09-03 发布INFO

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function AuthCon...

CVE-2026-85378

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-09-03 发布INFO

A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/api/registration/v2.go of the componen...

CVE-2026-85241

A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-09-03 发布INFO

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID}/notes is an unauthenticated endpoint that accepts a "deleted" query paramet...

CVE-2026-50554

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID}/notes is an unauth

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-285

安全公告2026-09-03 发布INFO

Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in note-mark

CVE-2026-50554

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID}/notes is an unauth

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-285

漏洞预警2026-09-03 发布INFO

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the file s71.py of the component Session Management. This manip...

CVE-2026-85105

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-09-02 发布INFO

The vulnerability allows any authenticated user to change their own password without providing the current password or having an active elevated session. It also allows the atta...

CVE-2026-79989

The vulnerability allows any authenticated user to change their own password without providing the current password or h

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

安全公告2026-09-02 发布INFO

Arbitrary user password reset leading to administrator account takeover

CVE-2026-72786 · CVE-2026-79989

The vulnerability allows any authenticated user to change their own password without providing the current password or h

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-285

漏洞预警2026-09-02 发布INFO

Craft CMS before 5.11.0 fails to enforce user-group scope filters on native GraphQL user relations including author, authors, uploader, draftCreator, and revisionCreator fields....

CVE-2026-84799

Craft CMS before 5.11.0 fails to enforce user-group scope filters on native GraphQL user relations including author, aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-09-01 发布INFO

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Updat...

CVE-2026-83743

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

安全公告2026-09-01 发布INFO

invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization

CVE-2026-83743

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /ve

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-285 #cwe-639

安全公告2026-08-31 发布INFO

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is...

CVE-2026-82816

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-285 #severity:low

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the component AI Session...

CVE-2026-82816

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-08-31 发布INFO

A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file cod...

CVE-2026-82621

A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e.

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639