#cwe-459

共收录 89 条相关情报。

漏洞预警2026-06-12 发布MEDIUM

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files throug...

CVE-2026-53867

Capgo 在 12.128.2 版本之前存在安全漏洞，当用户更换或删除个人资料图片时，系统未能从后端存储中删除先前上传的旧图片文件。攻击者可以利用之前生成的 URL 直接访问这些孤立的图片文件，从而实现未授权获取用户上传的内容。该漏洞源于

历史摘要 · 未重新核验 · NVD

#cve #cwe-459

漏洞预警2026-05-19 发布INFO

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.4.2 through 0.6.51 are vulnerable to an una...

CVE-2026-33232

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-459 #cwe-770

安全公告2026-05-15 发布INFO

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged...

CVE-2026-0427

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virt

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-459 #severity:medium

漏洞预警2026-05-15 发布INFO

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from an...

CVE-2026-0427

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virt

历史摘要 · 未重新核验 · NVD

#cve #cwe-459

安全公告2026-05-12 发布INFO

Due to improper Spring Security configuration, SAP Commerce cloud allows an unauthenticated user...

CVE-2026-34263

Due to improper Spring Security configuration, SAP Commerce cloud allows an unauthenticated user to perform malicious co

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-459 #severity:critical

漏洞预警2026-05-12 发布CRITICAL

Due to improper Spring Security configuration, SAP Commerce cloud allows an unauthenticated user to perform malicious configuration upload and code injection, resulting in arbit...

CVE-2026-34263

该漏洞存在于 SAP Commerce Cloud 中，由于 Spring Security 配置不当，导致未经身份验证的攻击者能够上传恶意配置并进行代码注入，最终实现任意服务器端代码执行。攻击者无需任何权限即可通过网络远程触发漏洞（CVS

历史摘要 · 未重新核验 · NVD

#cve #cwe-459

漏洞预警2026-05-08 发布INFO

Missing MinIO policy cleanup on bucket deletion via Apache CloudStack allows users to retain access to buckets which they previously owned. If another user creates a new bucket ...

CVE-2025-66467

Missing MinIO policy cleanup on bucket deletion via Apache CloudStack allows users to retain access to buckets which the

历史摘要 · 未重新核验 · NVD

#cve #cwe-459

漏洞预警2025-02-27 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cow_file_range() failed [BUG] When testing with COW fixup marked as BUG...

CVE-2024-57976

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cow_file_range(

来源摘录 · NVD

#cve #cwe-459

漏洞预警2024-04-17 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs Update cpu_sibling_map when disabling nonboot...

CVE-2024-26841

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Update cpu_sibling_map when disabling no

来源摘录 · NVD

#cve #cwe-459