#cwe-489

共收录 23 条相关情报。

← 返回所有主题
漏洞预警2026-10-06 发布INFO

A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within...

CVE-2026-83550

A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary cod...

CVE-2026-100102

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with n

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated at...

CVE-2026-102628

The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Tel...

CVE-2026-13313

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operat...

CVE-2026-100295

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could p...

CVE-2026-73593

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerabil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the internal task, dependency, and workflow schedulers are config...

CVE-2026-84486

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the inte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9...

CVE-2026-50228

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (ver

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. ...

CVE-2026-81943

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS...

CVE-2026-53952

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic f

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw

CVE-2026-53952

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic f

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

CVE-2026-58191

## Summary Appium's base-driver mounts the built-in `/test/guinea-pig`, `/test/guinea-pig-scrollable` and `/test/guinea

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products.

CVE-2026-66405

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved.

CVE-2026-66403

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log informatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerabilit...

CVE-2026-65893

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim...

CVE-2026-58378

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application co...

CVE-2026-54799

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base syst

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application in...

CVE-2026-54798

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base syst

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts t...

CVE-2026-58191

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

CVE-2026-58191

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior

历史摘要 · 未重新核验 · OSV.dev