#cwe-285

共收录 630 条相关情报。

漏洞预警2026-06-08 发布INFO

A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /Product_Inventory/api/users_h...

CVE-2026-11519

A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-08 发布INFO

A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the ...

CVE-2026-11500

A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-06-08 发布INFO

A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this issue is the function edit-admi...

CVE-2026-11476

A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda317

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

安全公告2026-06-08 发布INFO

A vulnerability has been found in NousResearch hermes-agent up to 0.12.0. This affects the...

CVE-2026-11461

A vulnerability has been found in NousResearch hermes-agent up to 0.12.0. This affects the function resolve_session_by_t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-285 #severity:low

漏洞预警2026-06-07 发布INFO

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This impacts the function callback of the file plugins/Stripe/Controllers/StripeContr...

CVE-2026-11462

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This impacts the function ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-07 发布INFO

A vulnerability has been found in NousResearch hermes-agent up to 0.12.0. This affects the function resolve_session_by_title of the file hermes_state.py of the component resume ...

CVE-2026-11461

A vulnerability has been found in NousResearch hermes-agent up to 0.12.0. This affects the function resolve_session_by_t

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

漏洞预警2026-06-06 发布MEDIUM

A vulnerability was identified in theonedev onedev up to 15.0.5. This vulnerability affects the function canAccessIssue of the file /issues/ of the component Pull Request Handle...

CVE-2026-11441

CVE-2026-11441 是 onedev 项目（版本 ≤15.0.5）中 Pull Request 处理组件的一个授权不当漏洞。该漏洞位于 /issues/ 文件中的 canAccessIssue 函数，攻击者通过操纵 issue 参

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-06 发布MEDIUM

A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of the file /repositories/{projectId}/default-branch of the component REST API. Thi...

CVE-2026-11440

CVE-2026-11440 影响 onedev 至 15.0.5 版本。该漏洞存在于 REST API 的 /repositories/{projectId}/default-branch 端点中，通过操纵 project.default

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-06 发布MEDIUM

A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. ...

CVE-2026-11439

CVE-2026-11439 影响 theonedev 开源项目管理系统 onedev 版本 15.0.5 及之前版本。漏洞位于 /projects/ 路径下的 Parent Project Handler 组件中，由于对参数 projec

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-06 发布MEDIUM

A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argume...

CVE-2026-11438

该漏洞影响 OneDev 版本 up to 15.0.5。攻击者可通过向 /projects 端点发送特制请求，操纵参数 `project.forkedFromId` 来绕过授权检查，导致未经授权的访问。CVSS 评分为 6.3（中危），攻

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

安全公告2026-06-05 发布INFO

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass...

CVE-2026-10580

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-285 #severity:critical

安全公告2026-06-05 发布INFO

Shopper: Authorization bypass and RBAC privilege escalation in team settings

CVE-2026-47744

## Impact Two distinct authorization defects in the team settings allowed any authenticated panel user to take over the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-269 #cwe-285 #severity:critical

漏洞预警2026-06-05 发布INFO

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1...

CVE-2026-10580

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrat

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-06-05 发布INFO

A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected is an unknown...

CVE-2026-11336

A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a388529

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-05 发布INFO

A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argumen...

CVE-2026-10876

A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-04 发布INFO

Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.

CVE-2026-48579

Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a netwo

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-06-04 发布INFO

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL...

CVE-2026-41522

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-06-03 发布MEDIUM

A security vulnerability has been detected in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the component Admi...

CVE-2026-10693

SourceCodester Online Boat Reservation System 1.0 的多个管理端点存在授权不当漏洞。攻击者可通过远程方式利用此漏洞，以低权限身份绕过授权限制，对系统进行未授权操作，可能导致信息泄露、数据篡改或

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-06-02 发布INFO

NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/pages/forum/get_quotes.php` only checks whether the caller is logged in, then reads a post...

CVE-2026-33398

NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/pages/forum/get_quotes.php` only

历史摘要 · 未重新核验 · NVD

#cve #cwe-285

漏洞预警2026-06-02 发布INFO

An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMER_GROUP_DESCRIBE (69) API validates the DESCRIBE operation on the ...

CVE-2026-41115

An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMER_GROUP_D

历史摘要 · 未重新核验 · NVD

#cve #cwe-285