#cwe-303

共收录 39 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布MEDIUM

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated use...

CVE-2026-84296

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2

来源摘录 · NVD

漏洞预警2026-10-19 发布MEDIUM

Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A flaw in the User Center login integ...

CVE-2026-86589

Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83906

Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofin

来源摘录 · NVD

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain pas...

CVE-2026-85972

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the ide

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the...

CVE-2026-101878

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExte

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-29 发布INFO

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExternalId stored procedure as NVARCHAR(50) while the column ...

CVE-2026-101878

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the User_ReadBySsoUserOrganizationIdExte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a verified user...

CVE-2026-77244

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token

CVE-2026-77244

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-17 发布INFO

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the...

CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was...

CVE-2026-93394

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authentica...

CVE-2026-15688

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control S

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH)...

CVE-2026-73444

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unau

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-15 发布INFO

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network s...

CVE-2026-73444

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s)...

CVE-2026-73458

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an a...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Window...

CVE-2026-9854

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without...

CVE-2026-9853

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker to bypass password verification when m...

CVE-2026-49467

Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected ...

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unaut

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check....

CVE-2026-11430

Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook featu

历史摘要 · 未重新核验 · GitHub Advisory