#cwe-287

共收录 1081 条相关情报。

漏洞预警2026-09-09 发布INFO

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file inclu...

CVE-2026-87924

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-09 发布INFO

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOper...

CVE-2026-87922

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e0

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user_by_oauth_sub and get_user_by_scim_external_id in backend...

CVE-2026-87016

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user

历史摘要 · 未重新核验 · NVD

#cve #cwe-155 #cwe-287

安全公告2026-09-09 发布INFO

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

CVE-2026-87016

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-155 #cwe-287

漏洞预警2026-09-08 发布INFO

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge() that uses loose comparison (==) instea...

CVE-2026-86723

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl:

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-08 发布INFO

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty result sets that writeSql never invalida...

CVE-2026-86722

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sql

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-08 发布INFO

AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['key'] parameter in...

CVE-2026-86721

AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-08 发布INFO

An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password.

CVE-2026-79576

An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-07 发布INFO

Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Regis...

CVE-2026-82758

Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-07 发布INFO

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be i...

CVE-2026-18922

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL aux

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privilege...

CVE-2026-80128

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-07 发布INFO

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric val...

CVE-2026-86426

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-07 发布INFO

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/H...

CVE-2026-86306

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-09-07 发布INFO

LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

CVE-2026-86426

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attac

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-287

漏洞预警2026-09-07 发布INFO

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication...

CVE-2026-86300

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Man

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-07 发布INFO

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the componen...

CVE-2026-86293

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Perfor...

CVE-2026-86292

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

安全公告2026-09-06 发布INFO

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to...

CVE-2026-75816

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:critical

安全公告2026-09-06 发布INFO

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the...

CVE-2026-18056

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:high

漏洞预警2026-09-06 发布CRITICAL

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to th...

CVE-2026-75816

CVE-2026-75816 是 WordPress 插件 “Frontend Admin by DynamiApps” 中的高危漏洞，影响该插件所有版本（包括最新受支持的 3.29.12）。该漏洞被归类为“认证绕过”，可导致账户接管。核心

历史摘要 · 未重新核验 · NVD

#cve #cwe-287