#cwe-639

共收录 1926 条相关情报。

漏洞预警2026-08-12 发布INFO

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that returns absolute filesystem paths unmodified to CheckAuth-onl...

CVE-2026-72802

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that retu

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-12 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticat...

CVE-2026-19228

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that u

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-12 发布INFO

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service conf...

CVE-2026-73298

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-dr

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-12 发布INFO

Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users a...

CVE-2026-73239

Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura.

历史摘要 · 未重新核验 · NVD

#cve #cwe-280 #cwe-639

漏洞预警2026-08-12 发布INFO

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no...

CVE-2026-68076

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team'

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

安全公告2026-08-12 发布INFO

Winter: Authenticated backend users can bypass Users controller permission checks

CVE-2026-35445

### Impact Affected versions of Winter CMS did not validate the handler name submitted through the form postback mechan

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-285 #cwe-639 #severity:high

漏洞预警2026-08-12 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by checking that the actor has `hasUploadRi...

CVE-2026-47231

Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-c

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-863

漏洞预警2026-08-12 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` mode `file_rename_save` shares the same root-cause shape as the cross-...

CVE-2026-47230

Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` mode `file_re

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-863

漏洞预警2026-08-12 发布INFO

Admidio is an open-source user management solution. `modules/categories.php` checks that the supplied `type` parameter (`ANN`, `EVT`, `ROL`, `USF`, …) corresponds to a module th...

CVE-2026-47227

Admidio is an open-source user management solution. `modules/categories.php` checks that the supplied `type` parameter (

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-863

漏洞预警2026-08-12 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete files fr...

CVE-2026-47226

Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862

漏洞预警2026-08-12 发布INFO

The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the album they target when it processes a front-end upl...

CVE-2026-18962

The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload int

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-12 发布INFO

The WP Travel Engine WordPress plugin before 6.8.5 does not perform authorization or ownership checks when loading a caller-supplied booking identifier in one of its unauthenti...

CVE-2026-16737

The WP Travel Engine WordPress plugin before 6.8.5 does not perform authorization or ownership checks when loading a ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-12 发布INFO

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read th...

CVE-2026-14858

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowi

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-12 发布HIGH

A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can expl...

CVE-2026-66878

CVE-2026-66878 是 multicloud-operators-subscription 组件中的一个信息泄露漏洞。该组件通常用于 OpenShift 或 Kubernetes 环境中的多集群订阅管理。漏洞的核心在于：具备命名空

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-12 发布INFO

A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissions to manipulate how the system handles sensitive informa...

CVE-2026-64927

A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissio

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

安全公告2026-08-11 发布INFO

Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the...

CVE-2026-19579

Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-639 #severity:medium

安全公告2026-08-11 发布INFO

Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP...

CVE-2026-69119

Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any aut

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-639 #severity:high

安全公告2026-08-11 发布INFO

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers,...

CVE-2026-69117

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-639 #severity:high

漏洞预警2026-08-11 发布INFO

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth `credentialsId` from a readable bot configuratio...

CVE-2026-48765

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspa

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-11 发布INFO

Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request cancellation endpoint. The cancel_by_admin and requesting...

CVE-2026-19579

Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-807