#cwe-603

共收录 8 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and au...

CVE-2026-110972

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backen

来源摘录 · NVD

安全公告2026-10-09 发布INFO

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital)...

CVE-2026-90983

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Aut

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-09 发布INFO

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: fro...

CVE-2026-90983

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allo...

CVE-2026-3096

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the origina

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens ...

CVE-2026-76945

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass ...

CVE-2026-71187

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Archite...

CVE-2026-42098

Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during credential registration by manipulating client-side JavaScript. This occurs be...

CVE-2026-8830

A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during credential registrati

历史摘要 · 未重新核验 · NVD