#cwe-306

共收录 1259 条相关情报。

← 返回所有主题
漏洞预警2026-10-23 发布MEDIUM

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication ...

CVE-2026-57207

NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running w

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain...

CVE-2026-114357

Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmwa

来源摘录 · NVD

漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming w...

CVE-2026-57146

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-

来源摘录 · NVD

漏洞预警2026-10-23 发布CRITICAL

PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and ...

CVE-2026-57116

PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deploy

来源摘录 · NVD

漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe ...

CVE-2026-56836

PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console en

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The vulnerability was confirmed to affect versions up...

CVE-2025-30053

The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthentica...

CVE-2025-30043

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is ac

来源摘录 · NVD

安全公告2026-10-23 发布INFO

An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11...

CVE-2026-19677

An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and...

CVE-2026-110825

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an...

CVE-2026-83938

Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

The ONVIF device service on the E3 responds to certain informational requests without requiring...

CVE-2026-111100

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Storybook dev server vulnerable to code injection from the local network

CVE-2026-114126

**Summary:** The Storybook dev server exposes its WebSocket authentication token to any client that can load its HTML pa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX...

CVE-2026-114636

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布INFO

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-T...

CVE-2026-114636

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT

历史摘要 · 未重新核验 · NVD

安全公告2026-10-22 发布INFO

Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router

CVE-2026-114636

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布INFO

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session...

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control plane enrollment status handler (HandleEnrollStatus at G...

CVE-2026-103090

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control

来源摘录 · NVD

安全公告2026-10-21 发布INFO

Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)

CVE-2026-103090

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-21 发布INFO

oretnom23 php-travel-agency-system Session session.php missing authentication

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布HIGH

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the cu...

CVE-2026-82987

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote,

来源摘录 · NVD