#cwe-306

共收录 1259 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布HIGH

Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional `--mcp-http` mod...

CVE-2026-61542

Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem,

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative p...

CVE-2026-103409

A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthen

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke rem...

CVE-2026-112197

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the ...

CVE-2026-102816

An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administ...

CVE-2026-93865

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenti

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-...

CVE-2026-90465

A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster i

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization ne...

CVE-2026-104381

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布HIGH

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's publi...

CVE-2026-104189

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file

来源摘录 · NVD

安全公告2026-10-27 发布INFO

3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share

CVE-2026-104189

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-27 发布INFO

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of pr...

CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, incl...

CVE-2026-106087

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00...

CVE-2026-82116

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active...

CVE-2026-18450

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to c

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows...

CVE-2026-116817

OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布INFO

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulatio...

CVE-2026-116604

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布CRITICAL

Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhook` accepts unsigned GitHub and GitLab events when a `Terr...

CVE-2026-102649

Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhoo

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the file src/BillaBear/Controller/InstallController.php of...

CVE-2026-116257

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of t

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configura...

CVE-2026-116070

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11.0 to before version 26.05, several Jakarta WebSocket end...

CVE-2026-55463

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11

来源摘录 · NVD

漏洞预警2026-10-23 发布CRITICAL

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, the DownloadTaskEndpoint WebSo...

CVE-2026-46651

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0

来源摘录 · NVD