#cwe-306

共收录 1279 条相关情报。

← 返回所有主题
漏洞预警2026-05-04 发布INFO

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation...

CVE-2026-7723

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布MEDIUM

A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component...

CVE-2026-7714

CVE-2026-7714 影响 Calibre-Web-Automated 4.0.6 及更早版本,该软件是一个基于 Calibre 的电子书管理自动化工具。漏洞位于 cps/cwa_functions.py 文件的 Admin Endp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's ...

CVE-2026-39858

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited ...

CVE-2026-35514

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical...

CVE-2025-13030

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files a...

CVE-2025-13030

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

CVE-2026-0204

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be access

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to ...

CVE-2026-41940

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthe

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Delta Electronics DIAView has an authentication bypass vulnerability.

CVE-2025-58318

Delta Electronics DIAView has an authentication bypass vulnerability.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

An unsecured configuration interface on affected devices allows unauthenticated remote attackers...

CVE-2026-3323

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive inf

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.

CVE-2026-3323

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive inf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to vers...

CVE-2026-41603

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift:

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

Penetration Testing engineers at Amazon have identified a security flaw related to request...

CVE-2024-54013

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server co

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to uni...

CVE-2024-54013

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webh...

CVE-2026-7113

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-02 发布HIGH

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to ...

CVE-2025-15620

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerabil

来源摘录 · NVD

漏洞预警2025-12-22 发布HIGH

Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding....

CVE-2023-53969

Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authenti

来源摘录 · NVD

漏洞预警2025-12-11 发布INFO

Siklu MultiHaul TG series devices through version 2.0.0 contain an unauthenticated vulnerability that allows remote attackers to retrieve randomly generated credentials via a ne...

CVE-2024-58300

Siklu MultiHaul TG series devices through version 2.0.0 contain an unauthenticated vulnerability that allows remote atta

来源摘录 · NVD

漏洞预警2013-07-31 发布HIGH

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of...

CVE-2013-2056

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between

来源摘录 · NVD