#cwe-749

共收录 73 条相关情报。

← 返回所有主题
漏洞预警2026-05-27 发布INFO

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials fr...

CVE-2025-14713

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0

历史摘要 · 未重新核验 · NVD

安全公告2026-05-26 发布INFO

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with...

CVE-2026-4051

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to e

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the preview route derives an example name ...

CVE-2026-44836

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not prop...

CVE-2026-4051

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to e

历史摘要 · 未重新核验 · NVD

安全公告2026-05-19 发布INFO

PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

CVE-2026-45805

### Summary The MCP module's `ReplServer` binds to all interfaces (`0.0.0.0:4403`) and exposes a `/execute` endpoint th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and...

CVE-2026-33583

Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables...

CVE-2026-33584

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-13 发布INFO

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. ...

CVE-2026-33584

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an unauthenticated and unencrypted HTTP GET method in the ...

CVE-2026-33583

Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via a

历史摘要 · 未重新核验 · NVD

安全公告2026-05-13 发布INFO

Nautobot: GitRepository.current_head field should not be writable through REST API

CVE-2026-44798

### Impact A user with access to add/change a GitRepository record could use the REST API to directly set the `current_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write...

CVE-2026-8108

The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布INFO

The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.

CVE-2026-8108

The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Memory corruption while processing IOCTL command when device is in power-save state.

CVE-2026-25266

Memory corruption while processing IOCTL command when device is in power-save state.

历史摘要 · 未重新核验 · NVD