#cwe-306

共收录 1261 条相关情报。

← 返回所有主题
漏洞预警2026-08-12 发布INFO

When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards al...

CVE-2026-18673

When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server...

CVE-2026-73296

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of th...

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affecte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system.

CVE-2026-19426

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directl

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated...

CVE-2026-66875

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without...

CVE-2026-66098

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the d

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker...

CVE-2026-73246

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kest

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/application.yml serves Micronaut management endpoints on port ...

CVE-2026-73245

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/appli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the dev...

CVE-2026-66875

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could c...

CVE-2026-66098

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the d

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth

CVE-2026-73245

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/appli

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-11 发布INFO

Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sa...

CVE-2026-73222

Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-64921

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate pri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-62777

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61367

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61365

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61364

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61356

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-50516

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to el

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · NVD