#cwe-287

共收录 1077 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1...

CVE-2026-73940

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1...

CVE-2026-71133

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily ...

CVE-2026-70913

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a...

CVE-2026-70757

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a...

CVE-2026-70756

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 a...

CVE-2026-70748

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially ex...

CVE-2026-81237

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_inte...

CVE-2026-54547

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, Au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts ...

CVE-2026-46488

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public dev-secret-change-me HS256 signing key when PLATFOR...

CVE-2026-57148

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator...

CVE-2026-57134

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAI_SESSION cookie issued after password verification but before TOTP completion is accepted by every /...

CVE-2026-52827

Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAI_SESSION cookie issued after password verif

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentication path uses ClientJwksResolverCache without reliably b...

CVE-2026-47426

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of the file core/httpd.py of the component Blacklist Endpoint...

CVE-2026-91002

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of ...

CVE-2026-90840

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identi...

CVE-2026-84606

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 -...

CVE-2026-19273

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gatewa

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

ZITADEL: Auto-linking by email: IdP-side email verification is not checked

CVE-2026-56666

### Summary A flaw in the external identity provider handler allows unauthorized account linking to occur under specifi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-11 发布INFO

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

CVE-2026-59151

## SAML Tenant Binding Enables Cross-Tenant Account Takeover ### Summary Prowler's SAML authentication flow trusted th

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-11 发布INFO

An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005...

CVE-2026-79395

An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia I

历史摘要 · 未重新核验 · NVD