#cwe-287
共收录 1099 条相关情报。
← 返回所有主题 漏洞预警2026-05-14 发布INFO
CVE-2026-20182
May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-14 发布INFO
CVE-2026-8181
The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulne
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2026-44478
hoppscotch is an open source API development ecosystem. The fix for CVE-2026-28215 in version 2026.2.0 addresses the una
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2026-42602
azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2026-44351
fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authentication-bypass vulnerabili
历史摘要 · 未重新核验 · NVD
安全公告2026-05-13 发布INFO
CVE-2026-44720
### Overview
A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-12 发布INFO
CVE-2026-44547
ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-12 发布INFO
CVE-2026-42855
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Pr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-12 发布INFO
CVE-2026-44196
Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-12 发布INFO
CVE-2026-44166
Pocketbase is an open source web backend written in go. Prior to 0.22.42 and 0.37.4, in some situations, if an attacker
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-12 发布INFO
CVE-2026-33117
Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-11 发布INFO
CVE-2026-8321
A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the f
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-11 发布INFO
CVE-2026-42869
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57,
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-11 发布INFO
CVE-2026-8305
A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookR
历史摘要 · 未重新核验 · NVD
安全公告2026-05-10 发布INFO
CVE-2026-8244
A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-10 发布INFO
CVE-2026-8244
A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function
历史摘要 · 未重新核验 · NVD
安全公告2026-05-10 发布INFO
CVE-2026-8214
A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-10 发布INFO
CVE-2026-8216
A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function i
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-10 发布HIGH
CVE-2026-8216
CVE-2026-8216 影响 IAS Canias ERP 8.03 版本,该软件是一款工业应用软件。漏洞位于 Java RMI 会话管理组件的 iasServerRemoteInterface.doAction 函数中。由于对用户身份
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-10 发布MEDIUM
CVE-2026-8214
该漏洞影响 IAS Canias ERP 8.03 版本,存在于 RMI(远程方法调用)接口的 doAction 函数中。攻击者可通过构造恶意请求,操纵 sessionId 参数实现认证绕过,从而在无需任何凭证的情况下远程发起攻击。漏洞细节
历史摘要 · 未重新核验 · NVD