#cwe-345

共收录 416 条相关情报。

← 返回所有主题
漏洞预警2026-09-03 发布INFO

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send craft...

CVE-2026-85431

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-cl...

CVE-2026-85430

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE_MESSAG...

CVE-2026-85429

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it fr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attack...

CVE-2026-53728

Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identi

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage

CVE-2026-53728

Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identi

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-03 发布INFO

Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

CVE-2026-84767

Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)

CVE-2026-73840

## Summary The OpenChoreo autobuild webhook endpoint (`POST /api/v1alpha1/autobuild`) selected the git provider used to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM...

CVE-2023-20576

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.

CVE-2023-20576

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption...

CVE-2026-20355

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attac...

CVE-2026-20355

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated...

CVE-2026-83533

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker w...

CVE-2026-19219

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store before including it in the product enquiry notification em...

CVE-2026-79621

The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store b

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This...

CVE-2026-82811

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-31 发布INFO

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome....

CVE-2026-82813

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the functi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The...

CVE-2026-82813

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation lea...

CVE-2026-82811

A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliation input to be treated as t...

CVE-2026-82858

@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote attacker to execute...

CVE-2026-19410

An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on

历史摘要 · 未重新核验 · NVD