#cwe-287

共收录 1081 条相关情报。

← 返回所有主题
漏洞预警2026-08-09 发布INFO

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulatio...

CVE-2026-19342

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integrat...

CVE-2026-48039

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potenti...

CVE-2026-56793

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenti...

CVE-2026-16030

The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlle...

CVE-2026-14205

The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges...

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate...

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

An authentication issue was addressed with improved state management. This issue is fixed in...

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basic_auth.go dedupli...

CVE-2026-71326

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the ne...

CVE-2026-65400

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified ...

CVE-2026-64665

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the registration handler at `POST /api/auth/r...

CVE-2026-48087

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · NVD

安全公告2026-08-06 发布INFO

OpenReception: WebAuthn passkey injection allows account takeover

CVE-2026-48087

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-06 发布INFO

The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict the recipient routing of its property request form, allowi...

CVE-2026-14547

The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — ...

CVE-2026-15459

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation result...

CVE-2026-18990

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts o

历史摘要 · 未重新核验 · NVD

安全公告2026-08-05 发布INFO

A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the...

CVE-2026-18816

A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-04 发布INFO

A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function...

CVE-2026-18810

A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard

历史摘要 · 未重新核验 · GitHub Advisory