#cwe-639

共收录 1905 条相关情报。

漏洞预警2026-10-13 发布INFO

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in manager/src/main/java/org/openremote/man...

CVE-2026-54641

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealm

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated memb...

CVE-2026-110129

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundContr

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other m...

CVE-2026-110127

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' ...

CVE-2026-110126

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying ...

CVE-2026-110125

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenan...

CVE-2026-110124

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authent

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to change other stores' product freight templates via ...

CVE-2026-110122

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another ...

CVE-2026-110121

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access other members' data by supp...

CVE-2026-110120

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows au

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and delete othe...

CVE-2026-110119

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/button...

CVE-2026-110118

WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complet

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController tradeAddress/save handler that allows authenticated member...

CVE-2026-110113

PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController t

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplyi...

CVE-2026-110107

RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated user

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying...

CVE-2026-110106

RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-13 发布INFO

Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' requests by authorizi...

CVE-2026-110098

Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

安全公告2026-10-13 发布INFO

fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail

CVE-2026-110129

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundContr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639

安全公告2026-10-13 发布INFO

waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints

CVE-2026-110127

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639

安全公告2026-10-13 发布INFO

waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints

CVE-2026-110126

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639

安全公告2026-10-13 发布INFO

waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints

CVE-2026-110125

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639

安全公告2026-10-13 发布INFO

FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpoints

CVE-2026-110124

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authent

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639