#cwe-285

共收录 628 条相关情报。

← 返回所有主题
漏洞预警2026-10-02 发布INFO

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging ex...

CVE-2026-104908

MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application o...

CVE-2026-103858

MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containm...

CVE-2026-103659

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten op

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared L...

CVE-2026-103532

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

CVE-2026-103532

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-30 发布INFO

A weakness has been identified in gedelumbung HospitalManagement up to...

CVE-2026-102844

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布INFO

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file applicatio...

CVE-2026-102846

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects the function detail of the file appli...

CVE-2026-102844

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vu

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a...

CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SA

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布INFO

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications ...

CVE-2026-86105

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain u...

CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SA

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An improper authorization vulnerability exists in the handling of sub-workflow tasks. An authenticated user who does not have permission to access a target project can reference...

CVE-2026-81569

An improper authorization vulnerability exists in the handling of sub-workflow tasks. An authenticated user who does not

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Bac...

CVE-2026-102293

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of the component Med...

CVE-2026-102261

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/ca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_requests/get_attendance_requests of the file hrms/api/__in...

CVE-2026-101006

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_r

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

A security vulnerability has been detected in fuzui StudentInfo up to...

CVE-2026-100897

A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impacted element is an unknown function of the file /StudentI...

CVE-2026-100897

A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impa

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of...

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webku

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-27 发布INFO

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the com...

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webku

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization

CVE-2026-100885

A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webku

历史摘要 · 未重新核验 · OSV.dev