#cwe-639

共收录 1905 条相关情报。

漏洞预警2026-10-06 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Se...

CVE-2026-32576

Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung a

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-06 发布INFO

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such mani...

CVE-2026-105572

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/tra

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-639

安全公告2026-10-06 发布INFO

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an...

CVE-2026-91107

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record thr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-639 #severity:critical

安全公告2026-10-05 发布INFO

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

CVE-2026-105754

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-20 #cwe-617 #cwe-639 #cwe-668

安全公告2026-10-05 发布INFO

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

CVE-2026-105755

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-639 #severity:medium

漏洞预警2026-10-05 发布INFO

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used ...

CVE-2026-105761

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server en

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /score and /rerank endpoints derives each worker's quer...

CVE-2026-105755

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at th

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in the disaggregated scale-out path accepts caller-suppli...

CVE-2026-105754

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-617 #cwe-639 #cwe-668 #cwe-704

漏洞预警2026-10-05 发布INFO

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update pat...

CVE-2026-91107

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record thr

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the project identifier in a project-scope...

CVE-2026-105699

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/bui...

CVE-2026-105698

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862

漏洞预警2026-10-05 发布INFO

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller ...

CVE-2026-105692

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-639

漏洞预警2026-10-05 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Contro...

CVE-2026-97305

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-li

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This...

CVE-2026-97070

Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting I

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check,...

CVE-2026-105639

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for an

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-287 #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using id__in=asset_ids an...

CVE-2026-105637

Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/vie

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id in the URL but omits it from the database query. A proje...

CVE-2026-105633

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEndpoint.get resolve FileAsset records within a workspa...

CVE-2026-105631

Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownlo

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare primary-key lookup without workspace...

CVE-2026-105629

Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v2.py were remediated for two cross-tenant asset IDOR...

CVE-2026-104975

Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/as

历史摘要 · 未重新核验 · NVD

#cve #cwe-639