#cwe-306

共收录 1259 条相关情报。

漏洞预警2026-10-01 发布INFO

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL d...

CVE-2026-103244

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that al

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

安全公告2026-10-01 发布INFO

ground-station before 0.8.0 Authentication Bypass via setup.restore

CVE-2026-103244

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that al

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-306

漏洞预警2026-10-01 发布INFO

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of res...

CVE-2026-96577

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network inter

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-01 发布INFO

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication....

CVE-2026-80276

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible m

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-01 发布INFO

Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API,...

CVE-2026-82825

Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This all

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-01 发布INFO

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal ...

CVE-2026-76142

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy serv

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-306

漏洞预警2026-10-01 发布INFO

A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy/src/main/java/com/supermarket/instantbuy/controller/Inst...

CVE-2026-103539

A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-10-01 发布INFO

A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderController.deleteOrder of the file order/src/main/java/com/superma...

CVE-2026-103538

A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderControlle

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-10-01 发布INFO

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/superma...

CVE-2026-103536

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderContro

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-30 发布INFO

A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of int...

CVE-2026-102150

A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker c

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with a...

CVE-2026-102149

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-30 发布INFO

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side ...

CVE-2026-102144

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-400

漏洞预警2026-09-30 发布INFO

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not p...

CVE-2026-102143

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesyste

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-434

漏洞预警2026-09-30 发布INFO

A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to t...

CVE-2026-102124

A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configurat

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-670

漏洞预警2026-09-30 发布INFO

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned mo...

CVE-2026-102121

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms c

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306

漏洞预警2026-09-30 发布INFO

An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intended state precondition, so during the initial activation wi...

CVE-2026-102110

An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intende

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-670

安全公告2026-09-30 发布INFO

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime...

CVE-2026-103057

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:medium

安全公告2026-09-30 发布INFO

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API...

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MO

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:medium

漏洞预警2026-09-30 发布INFO

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. ...

CVE-2026-103057

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpo

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-30 发布INFO

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in...

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MO

历史摘要 · 未重新核验 · NVD

#cve #cwe-306