#cwe-754

共收录 135 条相关情报。

漏洞预警2026-05-13 发布INFO

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.

CVE-2026-0235

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to b

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-13 发布INFO

ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a malicious page while logged in, the admin page on the use...

CVE-2026-42950

ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value. If a user views a

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-12 发布INFO

Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an aut...

CVE-2026-20754

Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denia

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

漏洞预警2026-05-11 发布INFO

Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @cl...

CVE-2026-42349

Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related auth

历史摘要 · 未重新核验 · NVD

#cve #cwe-754 #cwe-863

漏洞预警2026-05-09 发布INFO

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can ...

CVE-2026-42246

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-392 #cwe-393 #cwe-636 #cwe-754 #cwe-841

安全公告2026-05-08 发布INFO

free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)

CVE-2026-44324

### Summary free5GC's UDR `nudr-dr` `DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subs

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-704 #cwe-754 #severity:medium

安全公告2026-05-08 发布INFO

free5GC's NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference

CVE-2026-44322

### Summary free5GC's NEF `PATCH /3gpp-pfd-management/v1/{afId}/transactions/{transId}/applications/{appId}` handler pan

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-476 #cwe-754 #severity:high

安全公告2026-05-08 发布INFO

free5GC's PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

CVE-2026-44317

### Summary free5GC's PCF `POST /npcf-policyauthorization/v1/app-sessions` handler panics on a single authenticated requ

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-476 #cwe-754 #severity:medium

安全公告2026-05-08 发布INFO

free5GC's PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference

CVE-2026-44316

### Summary free5GC's PCF `POST /npcf-smpolicycontrol/v1/sm-policies` handler (`HandleCreateSmPolicyRequest`) panics wit

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-476 #cwe-754 #severity:high

漏洞预警2026-05-07 发布INFO

Admidio is an open-source user management solution. Prior to version 5.0.9, Role::stopMembership() does not verify whether removing a user from the administrator role leaves zer...

CVE-2026-41662

Admidio is an open-source user management solution. Prior to version 5.0.9, Role::stopMembership() does not verify wheth

历史摘要 · 未重新核验 · NVD

#cve #cwe-754

安全公告2026-05-04 发布INFO

net-imap vulnerable to STARTTLS stripping via invalid response timing

CVE-2026-42246

### Summary A man-in-the-middle attacker can cause `Net::IMAP#starttls` to return "successfully", without starting TLS.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rubygems #cwe-392 #cwe-393 #cwe-636 #cwe-754

安全公告2026-04-30 发布INFO

Clerk has an authorization bypass when combining organization, billing, or reverification checks

CVE-2026-42349

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@cler

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-754 #cwe-863 #severity:high

安全公告2026-04-29 发布INFO

Admidio Missing Minimum Administrator Check in Role Membership Removal

CVE-2026-41662

## Summary `Role::stopMembership()` does not verify whether removing a user from the administrator role leaves zero adm

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-754 #severity:medium

漏洞预警2024-12-28 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncate_node() syzbot reports a f2fs bug as below: ------...

CVE-2024-56692

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in tru

来源摘录 · NVD

#cve #cwe-754

漏洞预警2024-07-30 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are disabled and enabled by the application ts2phc. However, ...

CVE-2024-42139

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are

来源摘录 · NVD

#cve #cwe-754