#cwe-306
共收录 1259 条相关情报。
← 返回所有主题 漏洞预警2026-10-23 发布MEDIUM
CVE-2026-57207
NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running w
来源摘录 · NVD
漏洞预警2026-10-23 发布INFO
CVE-2026-114357
Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmwa
来源摘录 · NVD
漏洞预警2026-10-23 发布HIGH
CVE-2026-57146
PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-
来源摘录 · NVD
漏洞预警2026-10-23 发布CRITICAL
CVE-2026-57116
PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deploy
来源摘录 · NVD
漏洞预警2026-10-23 发布HIGH
CVE-2026-56836
PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console en
来源摘录 · NVD
漏洞预警2026-10-23 发布INFO
CVE-2025-30053
The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.
来源摘录 · NVD
漏洞预警2026-10-23 发布INFO
CVE-2025-30043
CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is ac
来源摘录 · NVD
安全公告2026-10-23 发布INFO
CVE-2026-19677
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthe
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-23 发布INFO
CVE-2026-110825
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-23 发布INFO
CVE-2026-83938
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker t
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-23 发布INFO
CVE-2026-111100
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-22 发布INFO
CVE-2026-114126
**Summary:** The Storybook dev server exposes its WebSocket authentication token to any client that can load its HTML pa
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-22 发布INFO
CVE-2026-114636
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-22 发布INFO
CVE-2026-114636
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT
历史摘要 · 未重新核验 · NVD
安全公告2026-10-22 发布INFO
CVE-2026-114636
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-10-21 发布INFO
CVE-2026-114439
A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-21 发布INFO
CVE-2026-103090
Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control
来源摘录 · NVD
安全公告2026-10-21 发布INFO
CVE-2026-103090
Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-21 发布INFO
CVE-2026-114439
A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-10-21 发布HIGH
CVE-2026-82987
There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote,
来源摘录 · NVD