#cwe-287

共收录 1081 条相关情报。

← 返回所有主题
漏洞预警2026-08-24 发布INFO

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the file app/Http/Controllers/Client/helpdesk/FormController....

CVE-2026-78434

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Filament is a collection of full-stack components for accelerated Laravel development. Prior to versions 4.12.0 and 5.7.0, incorrect challenge-form required-field handling allow...

CVE-2026-77567

Filament is a collection of full-stack components for accelerated Laravel development. Prior to versions 4.12.0 and 5.7.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP...

CVE-2026-66908

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. ...

CVE-2026-78168

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This ma...

CVE-2026-78167

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session

历史摘要 · 未重新核验 · NVD

安全公告2026-08-24 发布INFO

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the...

CVE-2026-78154

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-24 发布INFO

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_code of the file backend/app/api/routes/v1/user_invitation...

CVE-2026-78154

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_c

历史摘要 · 未重新核验 · NVD

安全公告2026-08-23 发布INFO

the-momentum open-wearables Public Invitation-Code Redemption Endpoint user_invitation_code.py redeem_invitation_code missing authentication

CVE-2026-78154

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-21 发布INFO

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request p...

CVE-2025-15671

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and s

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary...

CVE-2026-17142

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to imprope

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary...

CVE-2026-17000

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper au

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive...

CVE-2026-16972

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to impro

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed /bigbluebutton/api/handleJoinExistingUser through bigbluebutton-web/grails-app/controll...

CVE-2026-46355

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed /bigbluebutton/api/handleJoinE

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.

CVE-2026-17142

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to imprope

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.

CVE-2026-17000

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.

CVE-2026-16972

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to impro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trusted distributed search private key could forge an adminis...

CVE-2026-76338

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trus

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication.

CVE-2026-16857

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS config

历史摘要 · 未重新核验 · NVD

安全公告2026-08-19 发布INFO

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

CVE-2026-55235

## Summary In affected versions of `langgraph-api` (the LangGraph Server runtime), a run or cron could be created with

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security revie...

CVE-2026-20317

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering t

历史摘要 · 未重新核验 · NVD