#cwe-287

共收录 1081 条相关情报。

漏洞预警2026-06-02 发布INFO

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webh...

CVE-2026-10617

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAut

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-06-02 发布INFO

An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments configured with LdapAuth.mixedAuth=true and ...

CVE-2026-10611

An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-02 发布INFO

The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST endpoints, allowing an att...

CVE-2026-8293

The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-06-02 发布INFO

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects...

CVE-2026-10548

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:low

漏洞预警2026-06-02 发布INFO

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthropic_entry_from_credentials_file of the file agent/credent...

CVE-2026-10548

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthro

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-06-02 发布INFO

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an...

CVE-2026-40964

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote at

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:high

漏洞预警2026-06-01 发布INFO

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for ev...

CVE-2026-40964

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote at

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-01 发布INFO

A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the com...

CVE-2026-10288

A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a pre-2FA session cookie (cre...

CVE-2026-45691

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authentication bypass vuln...

CVE-2026-45690

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, and 33.0.0 to before 33.0.1, the files_lock app did not pr...

CVE-2026-45283

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-01 发布INFO

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setting Handler. Performing a manipulation results in missing ...

CVE-2026-10283

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setti

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-06-01 发布INFO

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of the file src/embedded-server.ts of the component API Endpoi...

CVE-2026-10281

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of th

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0, and 6.0.0 to before 6.4.0, a missing signature verificati...

CVE-2026-45156

Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0,

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to...

CVE-2026-45153

Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlockin

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-06-01 发布INFO

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to...

CVE-2026-10243

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

安全公告2026-05-31 发布INFO

A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to...

CVE-2026-10167

A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee0

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

漏洞预警2026-05-31 发布HIGH

A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. This impacts the function sign_auth_c...

CVE-2026-10167

CVE-2026-10167 影响 OUSL-GROUP-BrinaryBrains 开发的 School Student Management System 至 commit 1e70e5ad1125b86dca4ee086eb6bb12

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

安全公告2026-05-31 发布INFO

A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the...

CVE-2026-10157

A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-287 #severity:medium

漏洞预警2026-05-31 发布HIGH

A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handle...

CVE-2026-10157

于开源5G核心网项目Open5GS（版本2.7.6及之前）中发现一个高危认证绕过漏洞。该漏洞位于AMF（接入与移动性管理功能）组件的NGAP路径切换请求消息处理函数（src/amf/ngap-handler.c）中。由于对NGAP Path

历史摘要 · 未重新核验 · NVD

#cve #cwe-287