#cwe-306

共收录 1261 条相关情报。

漏洞预警2026-08-11 发布INFO

SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filer_si...

CVE-2026-72920

SeaweedFS is a distributed storage system. Prior to 4.24, the filer registers the SeaweedIdentityAccessManagement gRPC s

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary c...

CVE-2026-72748

AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that a

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do...

CVE-2026-58115

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running In

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint....

CVE-2026-72605

A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write job progress and read job metrics for any job in the work...

CVE-2026-72542

A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to overwrite any resource type schema via the update_re...

CVE-2026-72541

A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace membe

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription via the stripeCreat...

CVE-2026-72536

A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mani

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布INFO

A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the st...

CVE-2026-72535

A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-11 发布HIGH

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a...

CVE-2026-15563

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing

来源摘录 · NVD

#cve #cwe-306

安全公告2026-08-10 发布INFO

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK...

CVE-2026-18941

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:high

安全公告2026-08-10 发布INFO

A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on...

CVE-2026-15581

A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to b

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:high

安全公告2026-08-10 发布INFO

TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user...

CVE-2025-15681

TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authentic

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-306 #severity:critical

漏洞预警2026-08-10 发布INFO

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. Thi...

CVE-2026-18941

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-10 发布INFO

A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend ...

CVE-2026-15581

A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to b

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-10 发布INFO

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP ...

CVE-2025-15683

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-306

漏洞预警2026-08-10 发布INFO

TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can direc...

CVE-2025-15681

TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authentic

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the unauthenticated /api/providers/github/setup route in apps/dokploy/pages/api/providers/github...

CVE-2026-72871

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the unauthenticated /api/providers/gith

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-10 发布INFO

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupl...

CVE-2026-72688

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote at

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-10 发布INFO

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading,...

CVE-2026-72593

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to acce

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-10 发布INFO

A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQ_QUERY Socket.IO...

CVE-2026-72586

A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to que

历史摘要 · 未重新核验 · NVD

#cve #cwe-306