#cwe-287

共收录 1081 条相关情报。

漏洞预警2026-09-06 发布HIGH

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4. This is due ...

CVE-2026-18056

CVE-2026-18056 影响 WordPress 的 HivePress Authentication 插件（版本 1.1.4 及之前所有版本）。该插件在通过 Facebook 实现第三方登录时存在身份验证绕过漏洞，问题根源位于 au

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-09-05 发布INFO

Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback...

CVE-2026-86117

Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users in

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:critical

漏洞预警2026-09-05 发布INFO

Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users into existing accounts based solely on email address withou...

CVE-2026-86117

Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users in

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-05 发布INFO

The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signatur...

CVE-2026-13447

The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and includ

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-09-04 发布INFO

A security vulnerability has been detected in ramon-victor freegpt-webui up to...

CVE-2026-85702

A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

安全公告2026-09-04 发布INFO

A vulnerability has been found in ramon-victor freegpt-webui up to...

CVE-2026-85701

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

安全公告2026-09-04 发布INFO

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the...

CVE-2026-85637

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the f

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

漏洞预警2026-09-04 发布INFO

A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected is the function _conversation of the file serve...

CVE-2026-85702

A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-04 发布INFO

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4...

CVE-2026-85701

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-04 发布INFO

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the file core/sockets.py of the component Admin Endpoint. The ...

CVE-2026-85637

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

安全公告2026-09-04 发布INFO

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an...

CVE-2026-85636

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

漏洞预警2026-09-04 发布INFO

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The m...

CVE-2026-85636

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-04 发布INFO

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/ap...

CVE-2026-53761

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-09-04 发布INFO

Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api

CVE-2026-53761

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-287

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters.

CVE-2026-18221

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of cli

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.

CVE-2026-16892

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-04 发布INFO

Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS option generated for an Ingress carrying the nginx.i...

CVE-2026-85596

Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-04 发布INFO

Traefik versions before v2.11.55 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instead of rejection...

CVE-2026-85595

Traefik versions before v2.11.55 contain an authentication bypass vulnerability in the digestAuth middleware where unkno

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-09-04 发布INFO

Traefik v3.7 Authentication Bypass via TLS Option Conflict

CVE-2026-85596

Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-287

安全公告2026-09-04 发布INFO

Traefik before v2.11.55 Authentication Bypass via digestAuth

CVE-2026-85595

Traefik versions before v2.11.55 contain an authentication bypass vulnerability in the digestAuth middleware where unkno

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-287