#cwe-285

共收录 628 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a code_verifier only when the realm-wide codeVerifi...

CVE-2026-48717

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler req

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persis...

CVE-2026-45052

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privile...

CVE-2026-45048

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected by this vulnerability is the function session_star...

CVE-2026-90858

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization b...

CVE-2026-75792

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative use

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access sensitive us...

CVE-2026-65353

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-...

CVE-2026-90810

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specific...

CVE-2026-44715

OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticat

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

Shopper: privilege escalation via improper Livewire admin component authorization

CVE-2026-56828

## Summary Three Livewire admin components in `shopper/framework` (latest master at commit `fcd0c59`, released as v2.8.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-11 发布INFO

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS...

CVE-2026-53952

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl.nl-por...

CVE-2026-49463

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw

CVE-2026-53952

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic f

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-11 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause...

CVE-2026-80436

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-11 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause...

CVE-2026-80378

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to im...

CVE-2026-80436

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization.

CVE-2026-80378

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration...

CVE-2026-85543

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

CVE-2026-58611

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.php. The ...

CVE-2026-86277

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core...

CVE-2026-85638

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipula

历史摘要 · 未重新核验 · GitHub Advisory