#cwe-287

共收录 1077 条相关情报。

← 返回所有主题
漏洞预警2026-09-17 发布INFO

Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expenses tool, or anything they legitimat...

CVE-2026-78425

Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead, which all...

CVE-2026-86710

The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as an...

CVE-2026-86709

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

The Private Feed Key WordPress plugin through 0.1 does not verify that the key used to authenticate a feed request is one it issued, matching any stored user metadata value inst...

CVE-2026-86707

The Private Feed Key WordPress plugin through 0.1 does not verify that the key used to authenticate a feed request is on

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored...

CVE-2026-92578

WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-16 发布INFO

WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a valid login credential through two independent code path...

CVE-2026-92578

WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker...

CVE-2026-92792

OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-16 发布INFO

Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confidential client registered in the Keycloak realm, not only th...

CVE-2026-76187

Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confiden

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exp...

CVE-2026-87217

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exp...

CVE-2026-87188

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exp...

CVE-2026-87184

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exp...

CVE-2026-87176

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exp...

CVE-2026-87175

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exp...

CVE-2026-87173

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exp...

CVE-2026-87170

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.2...

CVE-2026-87129

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and secu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.2...

CVE-2026-87128

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and secu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2....

CVE-2026-83462

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are ...

CVE-2026-83452

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Interna

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics). Supported versions that are affected are 13.5 an...

CVE-2026-83355

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Me

历史摘要 · 未重新核验 · NVD