#cwe-306

共收录 1260 条相关情报。

← 返回所有主题
安全公告2026-09-07 发布INFO

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-07 发布INFO

In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its...

CVE-2026-86486

In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-07 发布INFO

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data

CVE-2026-86506

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed prof

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank

CVE-2026-86486

In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri

历史摘要 · 未重新核验 · NVD

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-79645

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerabil...

CVE-2026-79645

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerabil...

CVE-2026-78480

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerabili...

CVE-2026-80132

ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布CRITICAL

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An una...

CVE-2026-76578

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which

来源摘录 · NVD

漏洞预警2026-09-07 发布INFO

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the componen...

CVE-2026-86293

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Perfor...

CVE-2026-86292

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

RouterOS accepts a "related" btest connection before the corresponding primary session has...

CVE-2026-67277

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-05 发布INFO

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv...

CVE-2026-67277

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot...

CVE-2026-86184

Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows un

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that...

CVE-2026-86124

AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-05 发布INFO

Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME...

CVE-2026-86121

Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-05 发布INFO

Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows unauthenticated attackers to authenticate as any user by em...

CVE-2026-86184

Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows un

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route

CVE-2026-86184

Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows un

历史摘要 · 未重新核验 · OSV.dev