#cwe-706

共收录 71 条相关情报。

← 返回所有主题
漏洞预警2026-08-25 发布INFO

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium sec...

CVE-2026-78942

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecure obje...

CVE-2026-67602

phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attacke

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to...

CVE-2026-65816

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-65816

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布HIGH

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly accou...

CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attribut

来源摘录 · NVD

安全公告2026-08-18 发布INFO

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169...

CVE-2026-76039

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-18 发布INFO

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive informa...

CVE-2026-76039

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference...

CVE-2026-29036

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointe

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointer_inplace() function within cJSON_Utils.c that allows una...

CVE-2026-29036

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointe

历史摘要 · 未重新核验 · NVD

安全公告2026-07-20 发布INFO

File Browser: Colliding username normalization gives two users the same home directory

CVE-2026-62685

## Summary FileBrowser confines each user to a *scope*: a home directory that acts as the boundary for everything they

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-15 发布INFO

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, File Browser builds ne...

CVE-2026-62685

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

File Browser: Colliding username normalization gives two users the same home directory

CVE-2026-62685

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-14 发布INFO

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock...

CVE-2026-62190

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-13 发布INFO

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or persist actions beyond their i...

CVE-2026-62190

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-t

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

OpenClaw < 2026.6.9 Authorization Bypass via flock wrapper

CVE-2026-62190

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-10 发布INFO

A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of...

CVE-2026-57054

A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-09 发布INFO

A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based atta...

CVE-2026-57054

A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS o

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7,...

CVE-2025-12506

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-08 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could ha...

CVE-2025-12506

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and

历史摘要 · 未重新核验 · NVD

安全公告2026-07-06 发布INFO

cp: -R reads device nodes as streams, destroying device semantics

CVE-2026-35358

The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device

历史摘要 · 未重新核验 · GitHub Advisory