#cwe-639

共收录 1905 条相关情报。

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice generation history via the userI...

CVE-2026-108609

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice records by supplying an arbitr...

CVE-2026-108608

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video generation records by supplyin...

CVE-2026-108607

JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header....

CVE-2026-108596

OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' tel

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-...

CVE-2026-108547

AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users t

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

安全公告2026-10-10 发布INFO

AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var

CVE-2026-108547

AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639

漏洞预警2026-10-10 发布INFO

Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users...

CVE-2026-108164

Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

安全公告2026-10-10 发布INFO

Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

CVE-2026-108164

Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639

漏洞预警2026-10-10 发布INFO

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to,...

CVE-2026-93746

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerab

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization i...

CVE-2026-91050

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to I

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

The Tutor LMS WordPress plugin before 4.1.1 does not verify that the posts named in its course content ordering requests belong to a course the requester manages, allowing user...

CVE-2026-85571

The Tutor LMS WordPress plugin before 4.1.1 does not verify that the posts named in its course content ordering request

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor ...

CVE-2026-105977

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before del

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-10 发布INFO

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 v...

CVE-2026-104898

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Obje

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-09 发布INFO

CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications. Prior to 3.33.0, GET /admin/tiDash/editClientFo...

CVE-2026-107856

CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit appl

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-09 发布INFO

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serve...

CVE-2026-107854

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billin

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-09 发布INFO

Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview access voter as Contao\CoreBundle\Security\Voter\DataContai...

CVE-2026-107850

Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview ac

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862

安全公告2026-10-09 发布INFO

Contao: Improper access control in the preview links module

CVE-2026-107850

`core-bundle/config/services.yaml` registers the preview access voter with the class `Contao\CoreBundle\Security\Voter\D

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-639 #cwe-862 #severity:medium

安全公告2026-10-09 发布INFO

Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project

CVE-2026-91980

### Summary When you share a project with a team, the API lets you attach any team on the instance, including teams you

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #cwe-639 #severity:medium

安全公告2026-10-09 发布INFO

Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)

CVE-2026-91984

## Summary The task-position endpoint authorizes only the task side of the write: `TaskPosition.CanUpdate` delegates to

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-639 #cwe-863 #severity:medium

安全公告2026-10-09 发布INFO

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

CVE-2026-91985

## Summary A user who has only read permission on a project can call the single link-share read endpoint and receive th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #cwe-639 #cwe-862 #severity:high