#cwe-347

共收录 355 条相关情报。

← 返回所有主题
漏洞预警2026-08-28 发布INFO

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC me...

CVE-2026-76581

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway (RGW) SigV4 handle...

CVE-2026-54330

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation

CVE-2026-54330

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-27 发布INFO

openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted ...

CVE-2026-81717

openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who...

CVE-2026-81714

openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories...

CVE-2026-81701

openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSI...

CVE-2026-81700

openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encr...

CVE-2026-81680

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, al

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 Integrity Bypass via Added Files

CVE-2026-81717

openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, wh

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass

CVE-2026-81714

openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key wh

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin

CVE-2026-81701

openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 GPG Signature Verification Bypass

CVE-2026-81700

openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal

CVE-2026-81680

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, al

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-25 发布INFO

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

CVE-2026-57910

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to ...

CVE-2026-75946

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the manage...

CVE-2026-68745

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized...

CVE-2026-62834

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privil

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62834

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in ...

CVE-2026-72861

The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. ver

历史摘要 · 未重新核验 · NVD

安全公告2026-08-20 发布INFO

Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent

CVE-2026-72861

The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. ver

历史摘要 · 未重新核验 · OSV.dev