#cwe-287

共收录 1077 条相关情报。

漏洞预警2026-10-01 发布INFO

A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy/src/main/java/com/supermarket/instantbuy/controller/Inst...

CVE-2026-103539

A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-10-01 发布INFO

A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderController.deleteOrder of the file order/src/main/java/com/superma...

CVE-2026-103538

A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderControlle

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-10-01 发布INFO

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/superma...

CVE-2026-103536

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderContro

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-30 发布INFO

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to...

CVE-2026-102128

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks plat

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-30 发布INFO

Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enfo...

CVE-2026-102106

Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kit

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-29 发布INFO

Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The premature issuance of an rememberme cookie leads...

CVE-2026-92227

Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-29 发布INFO

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since...

CVE-2026-101269

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same s

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-29 发布INFO

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads t...

CVE-2026-102248

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-29 发布INFO

A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsense_backend/app/routes/circleback_webhook_route....

CVE-2026-102245

A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

安全公告2026-09-29 发布INFO

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the...

CVE-2026-101280

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

安全公告2026-09-29 发布INFO

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this...

CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function op

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

漏洞预警2026-09-29 发布INFO

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_sp2_find_mailfrom_domain of the file libopendmarc...

CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function op

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-29 发布INFO

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component Multi-Record Set Handler. Th...

CVE-2026-101280

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-290

安全公告2026-09-29 发布INFO

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront...

CVE-2026-102364

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authentica

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

漏洞预警2026-09-29 发布INFO

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authenticate as back-office users by reusing their session tokens. ...

CVE-2026-102364

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authentica

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-28 发布INFO

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication....

CVE-2026-101077

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-28 发布INFO

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation...

CVE-2026-101073

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa o

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-28 发布INFO

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session id...

CVE-2026-52749

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the function cleanCache of the file pages/api/cache.js of the co...

CVE-2026-101004

A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-28 发布INFO

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipul...

CVE-2026-100903

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/o

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306