#cwe-306

共收录 1279 条相关情报。

← 返回所有主题
漏洞预警2026-06-12 发布INFO

The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to exploit a specific funct...

CVE-2026-11848

The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnerability, allowing una

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-12 发布INFO

An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device.

CVE-2026-11535

An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unaut

历史摘要 · 未重新核验 · NVD

安全公告2026-06-11 发布INFO

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that...

CVE-2026-49973

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remot

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-11 发布INFO

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and...

CVE-2026-50245

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is r

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-11 发布INFO

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

CVE-2026-50245

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-11 发布INFO

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the _se...

CVE-2026-49973

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remot

历史摘要 · 未重新核验 · NVD

安全公告2026-06-11 发布INFO

Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS

CVE-2026-48050

### Summary Arc registers Go's `net/http/pprof` handlers at `/debug/pprof/*` via `app.Use(pprof.New())` in `internal/ap

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-11 发布INFO

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 an...

CVE-2026-35273

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-50512

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality ...

CVE-2026-9212

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-50507

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-47281

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

安全公告2026-06-08 发布INFO

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated...

CVE-2023-54352

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-08 发布INFO

WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder...

CVE-2023-54350

WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-08 发布INFO

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme d...

CVE-2023-54352

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary...

CVE-2023-54350

WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary files to an...

CVE-2026-11420

Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauth

历史摘要 · 未重新核验 · NVD

安全公告2026-06-05 发布INFO

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A...

CVE-2025-71318

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-05 发布INFO

TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Ve...

CVE-2026-45327

TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages (such ...

CVE-2025-71318

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated

历史摘要 · 未重新核验 · NVD