#cwe-285

共收录 628 条相关情报。

← 返回所有主题
安全公告2026-08-25 发布INFO

djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

CVE-2026-55571

### Impact djust's `LiveViewConsumer` mounts a `LiveView` over a WebSocket. When a view is gated (`login_required` / `p

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-25 发布INFO

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation...

CVE-2026-78887

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token (least-privilege) restrictions on several privileged admin routes. Multiple privileged endpoints (e....

CVE-2026-79667

Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token (least-privilege) restrictions on several p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Han...

CVE-2026-78160

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to i...

CVE-2026-78158

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseReq

历史摘要 · 未重新核验 · NVD

安全公告2026-08-24 发布INFO

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0...

CVE-2026-78144

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vuln

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0....

CVE-2026-78142

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown fu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-24 发布INFO

Dolibarr ERP User Notes note.php authorization

CVE-2026-78160

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing o

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-24 发布INFO

Open5GS AMF UEContextReleaseRequest Path improper authorization

CVE-2026-78158

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseReq

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-23 发布INFO

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarde...

CVE-2026-78144

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vuln

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component...

CVE-2026-78142

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown fu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit_user_account.php of the component...

CVE-2026-78115

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpel...

CVE-2026-77795

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceControl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the...

CVE-2026-77686

A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list...

CVE-2026-66722

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, render_object_structure in cms/views.py renders cms/t...

CVE-2026-54624

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0

历史摘要 · 未重新核验 · NVD

安全公告2026-08-20 发布INFO

django CMS: Structure endpoint bypasses page-view permission

CVE-2026-54624

### Summary The structure-board endpoint (`render_object_structure`) renders a page's plugin structure without verifying

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipul...

CVE-2026-77036

A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayContro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on So...

CVE-2026-18283

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function add_grade of the file /index.php. Perform...

CVE-2026-76999

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affec

历史摘要 · 未重新核验 · NVD