#cwe-287

共收录 1099 条相关情报。

← 返回所有主题
漏洞预警2026-05-14 发布INFO

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new a...

CVE-2026-20182

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1...

CVE-2026-8181

The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

hoppscotch is an open source API development ecosystem. The fix for CVE-2026-28215 in version 2026.2.0 addresses the unauthenticated POST /v1/onboarding/config endpoint by check...

CVE-2026-44478

hoppscotch is an open source API development ecosystem. The fix for CVE-2026-28215 in version 2026.2.0 addresses the una

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single v...

CVE-2026-42602

azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authentication-bypass vulnerability in fast-jwt's async key-resolver flow allows any unaut...

CVE-2026-44351

fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authentication-bypass vulnerabili

历史摘要 · 未重新核验 · NVD

安全公告2026-05-13 发布INFO

OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

CVE-2026-44720

### Overview A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布INFO

ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The hardening commit was merged and then silently stripped fr...

CVE-2026-44547

ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer Digest authentication impleme...

CVE-2026-42855

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained...

CVE-2026-44196

Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Pocketbase is an open source web backend written in go. Prior to 0.22.42 and 0.37.4, in some situations, if an attacker knows the email address of the victim they can create and...

CVE-2026-44166

Pocketbase is an open source web backend written in go. Prior to 0.22.42 and 0.37.4, in some situations, if an attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-33117

Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component...

CVE-2026-8321

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret...

CVE-2026-42869

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookRequest of the file extensions/bluebubbles/src/monitor.ts ...

CVE-2026-8305

A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookR

历史摘要 · 未重新核验 · NVD

安全公告2026-05-10 发布INFO

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This...

CVE-2026-8244

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-10 发布INFO

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function of the component Login RMI Interface. The manipulation of...

CVE-2026-8244

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function

历史摘要 · 未重新核验 · NVD

安全公告2026-05-10 发布INFO

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects...

CVE-2026-8214

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue...

CVE-2026-8216

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-10 发布HIGH

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function iasServerRemoteInterface.doAction of the component Java RM...

CVE-2026-8216

CVE-2026-8216 影响 IAS Canias ERP 8.03 版本,该软件是一款工业应用软件。漏洞位于 Java RMI 会话管理组件的 iasServerRemoteInterface.doAction 函数中。由于对用户身份

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-10 发布MEDIUM

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of the component RMI Interface. The manipulation of the argu...

CVE-2026-8214

该漏洞影响 IAS Canias ERP 8.03 版本,存在于 RMI(远程方法调用)接口的 doAction 函数中。攻击者可通过构造恶意请求,操纵 sessionId 参数实现认证绕过,从而在无需任何凭证的情况下远程发起攻击。漏洞细节

历史摘要 · 未重新核验 · NVD