#cwe-287

共收录 1081 条相关情报。

← 返回所有主题
漏洞预警2026-09-03 发布INFO

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read ...

CVE-2026-83961

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password...

CVE-2026-84831

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authenticati

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)

CVE-2026-73840

## Summary The OpenChoreo autobuild webhook endpoint (`POST /api/v1alpha1/autobuild`) selected the git provider used to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge

CVE-2026-62669

### Summary When 2FA is enabled on an account, submitting correct credentials authenticates the user but leaves them una

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part...

CVE-2026-84840

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file Intercepti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is...

CVE-2026-84839

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionalit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. ...

CVE-2026-84840

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file Intercepti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO ...

CVE-2026-84839

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionalit

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

tsi-coop tsi-dpdp-cms Bootstrap Setup Endpoint InterceptingFilter.java missing authentication

CVE-2026-84840

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file Intercepti

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

tsi-coop tsi-dpdp-cms Admin Console/DPO Compliance Console web.xml missing authentication

CVE-2026-84839

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionalit

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-02 发布INFO

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user...

CVE-2024-7956

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to l...

CVE-2026-82183

The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam sin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to edit the targeted user account in the update-user action...

CVE-2026-12526

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the...

CVE-2026-84423

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulati...

CVE-2026-84423

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Casdoor upload-resource API resource.go missing authentication

CVE-2026-84423

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled

CVE-2026-77567

A flaw in the challenge handling for app-based multi-factor authentication allows the second factor to be bypassed. This

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication co...

CVE-2026-73777

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exp...

CVE-2026-73771

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authenticatio...

CVE-2026-73764

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthen

历史摘要 · 未重新核验 · NVD