#cwe-288

共收录 218 条相关情报。

← 返回所有主题
漏洞预警2026-06-02 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n...

CVE-2026-40780

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public reverse-proxied requests as local when the app receives ...

CVE-2026-45577

Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R...

CVE-2025-41273

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID...

CVE-2026-35090

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can conne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. ...

CVE-2026-35087

Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Password Recovery Exploitation.Thi...

CVE-2026-42760

Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types (Remove comments) comments-plus allows Password Recovery ...

CVE-2026-42749

Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affe...

CVE-2026-42745

Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This iss...

CVE-2026-42735

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-managem

历史摘要 · 未重新核验 · NVD

安全公告2026-05-26 发布INFO

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

CVE-2026-43945

**Pre-auth** RCE in FUXA via Logic Bypass Summary A Critical vulnerability chain exists in FUXA (v.1.3.0-2706) that al

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is...

CVE-2025-68711

AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather th...

CVE-2025-68708

SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is impl...

CVE-2025-68710

Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-25 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue aff...

CVE-2026-45217

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommer

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras....

CVE-2026-8598

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not requi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about...

CVE-2026-8598

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not requi

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an...

CVE-2026-24207

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an...

CVE-2026-24206

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to code exe...

CVE-2026-24207

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability might lead to escalati...

CVE-2026-24206

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

历史摘要 · 未重新核验 · NVD