#cwe-306

共收录 1279 条相关情报。

← 返回所有主题
漏洞预警2026-06-05 发布INFO

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Acc...

CVE-2026-6274

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electron

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-05 发布INFO

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially ...

CVE-2026-11238

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a use

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration be...

CVE-2024-27892

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration be...

CVE-2024-27890

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webh...

CVE-2026-10617

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAut

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an...

CVE-2026-0611

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed ...

CVE-2026-42074

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoti...

CVE-2026-0611

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Cryptographic issue while processing partition table entries allows unauthorized modification of...

CVE-2026-24090

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Cryptographic Issue while processing a specific partition which allows unauthorized write access...

CVE-2026-24088

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

CVE-2026-24090

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

CVE-2026-24088

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setting Handler. Performing a manipulation results in missing ...

CVE-2026-10283

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of the file src/embedded-server.ts of the component API Endpoi...

CVE-2026-10281

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a cross-origin WebSocket hijack vulnerability in Cline Kan...

CVE-2026-44211

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In versions 2.13.0 and prior, there is a

历史摘要 · 未重新核验 · NVD

安全公告2026-06-01 发布INFO

@agenticmail/mcp Missing Authentication for Critical Function

# AgenticMail MCP HTTP authorization bypass ## Summary `@agenticmail/mcp` exposes a Streamable HTTP transport when sta

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead ...

CVE-2026-25599

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to...

CVE-2026-10243

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of

历史摘要 · 未重新核验 · NVD

安全公告2026-05-30 发布INFO

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated...

CVE-2018-25412

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload maliciou

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-30 发布INFO

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with ...

CVE-2018-25412

Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload maliciou

历史摘要 · 未重新核验 · NVD