#cwe-287

共收录 1077 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows una...

CVE-2026-101537

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily exploitable vulnerability ...

CVE-2026-101521

Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0....

CVE-2026-101499

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability al...

CVE-2026-101484

Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegat...

CVE-2026-113682

Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredH...

CVE-2026-105949

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

CVE-2026-43844

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthentic...

CVE-2026-113469

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature ve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield serv...

CVE-2026-111090

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布CRITICAL

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able ...

CVE-2026-86868

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypas...

CVE-2026-84490

This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker wit

历史摘要 · 未重新核验 · NVD

安全公告2026-10-20 发布INFO

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...

CVE-2026-107400

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.

CVE-2026-107400

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accep...

CVE-2026-105815

TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-re...

CVE-2026-105814

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request conta

历史摘要 · 未重新核验 · NVD

安全公告2026-10-19 发布INFO

A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad....

CVE-2026-112037

A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown functi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-19 发布INFO

A security vulnerability has been detected in dotnet eShop up to...

CVE-2026-112044

A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn...

CVE-2026-111911

phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its...

CVE-2026-111895

phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID logi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that...

CVE-2026-111898

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to tak

历史摘要 · 未重新核验 · GitHub Advisory