#cwe-290

共收录 318 条相关情报。

← 返回所有主题
漏洞预警2026-08-13 发布INFO

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, s...

CVE-2026-0292

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enabl

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in...

CVE-2026-72809

SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper...

CVE-2026-59916

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an...

CVE-2026-46731

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-12 发布INFO

SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth function, which grants the administrator role (RoleAdminis...

CVE-2026-72809

SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could ...

CVE-2026-59916

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerab

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local ...

CVE-2026-46731

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template derives from the dataplane's kuma.io/workload label, the XDS authenticator in kuma-cp va...

CVE-2026-18677

In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template derives from the dataplane's ku

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded t...

CVE-2025-59319

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by...

CVE-2026-67558

The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match aga

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match against the BLE advertisement name only, with no cryptograph...

CVE-2026-67558

The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match aga

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without ver...

CVE-2026-18639

When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\". This can lead to an account takeover atta...

CVE-2026-18972

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-M

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.

CVE-2026-6181

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after

历史摘要 · 未重新核验 · NVD

安全公告2026-08-10 发布INFO

A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass...

CVE-2026-14450

A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy gateway by forging HTTP headers, specifically `X-MaaS-Us...

CVE-2026-14450

A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified ...

CVE-2026-64665

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.

CVE-2026-65570

Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.

CVE-2026-65502

Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.

CVE-2026-32469

Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.

历史摘要 · 未重新核验 · NVD