#cwe-425

共收录 25 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directo...

CVE-2026-108938

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customize...

CVE-2026-87744

A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security co

历史摘要 · 未重新核验 · NVD

安全公告2026-10-03 发布INFO

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration...

CVE-2026-105046

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-02 发布INFO

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

CVE-2026-105046

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change functio...

CVE-2026-80275

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote a...

CVE-2026-40532

A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-

历史摘要 · 未重新核验 · NVD

安全公告2026-08-23 发布INFO

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an...

CVE-2026-78051

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-23 发布MEDIUM

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie...

CVE-2026-78051

CVE-2026-78051 是 alexta69 MeTube 项目(版本至 2026.06.10)中存在的一个信息泄露漏洞。该漏洞位于 /download/.metube/cookies.txt 文件的 Cookie 文件处理组件中,攻

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.

CVE-2026-14953

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/login_registration_system.sql o...

CVE-2026-76799

A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the f

历史摘要 · 未重新核验 · NVD

安全公告2026-08-15 发布INFO

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an...

CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-15 发布INFO

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The m...

CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product.

CVE-2026-60011

Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing)...

CVE-2026-21760

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to acces...

CVE-2026-21760

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 imp...

CVE-2024-23573

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this issue is the function Spyc::YAMLLoad of the file /config/config.yaml of the com...

CVE-2026-13533

A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this issue is the function

历史摘要 · 未重新核验 · NVD

安全公告2026-06-22 发布INFO

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes...

CVE-2026-9610

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-22 发布INFO

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directl...

CVE-2026-9610

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated at...

CVE-2026-34028

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not pr

历史摘要 · 未重新核验 · NVD