#cwe-306

共收录 1259 条相关情报。

漏洞预警2026-09-22 发布INFO

A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unknown processing of the file /index.html of the component WebSocket Service. The...

CVE-2026-94493

A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-09-21 发布INFO

DesktopSMS 1.11.0 by MrPear contains an unauthorized access vulnerability that allows local attackers to transmit SMS, retrieve SMS-derived content, and persist an attacker-sele...

CVE-2026-94540

DesktopSMS 1.11.0 by MrPear contains an unauthorized access vulnerability that allows local attackers to transmit SMS, r

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-20 发布INFO

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows all...

CVE-2026-92254

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driv

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-306

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certifica...

CVE-2026-93964

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCe

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

安全公告2026-09-20 发布INFO

NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

CVE-2026-93964

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCe

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-287 #cwe-306

漏洞预警2026-09-20 发布MEDIUM

A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Controllers/Api/ApiV1Controller.php of the component OAuth ...

CVE-2026-93960

CVE-2026-93960 是披露在开源联邦式图片社交平台 Pixelfed 中的一个认证缺失（missing authentication）类漏洞，影响版本为 0.12.11 及之前。问题位于 app/Http/Controllers/

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

安全公告2026-09-18 发布INFO

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register...

CVE-2026-93839

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allow

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:critical

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...

CVE-2026-84075

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentic

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:critical

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the...

CVE-2026-84078

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:critical

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attack

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:critical

漏洞预警2026-09-18 发布INFO

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated attackers to register arbitrary nodes b...

CVE-2026-93839

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer...

CVE-2026-84078

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.

CVE-2026-84075

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentic

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guar...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-09-18 发布INFO

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.4, ShiroFilter configures /attachment/preview/{id} ...

CVE-2026-76902

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-862

漏洞预警2026-09-18 发布INFO

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, SseController exposes the anonymous /sse/subscri...

CVE-2026-63647

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-639

漏洞预警2026-09-18 发布INFO

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector.

CVE-2026-11539

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX conne

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

安全公告2026-09-18 发布INFO

LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint

CVE-2026-93839

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allow

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-306

安全公告2026-09-18 发布INFO

Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

CVE-2026-77339

## Summary A malicious website can use DNS rebinding to control a developer's local process-compose MCP SSE listener wh

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-306 #cwe-346 #severity:medium

漏洞预警2026-09-18 发布INFO

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependen...

CVE-2026-93559

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This aff

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306