#cwe-799

共收录 34 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operation allows an unauthenticated actor to create arbitrary or...

CVE-2026-63399

Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operati

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /baser/api/bc-mail/mail_messages/add/{mailContentId}.json end...

CVE-2026-115480

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /bas

来源摘录 · NVD

漏洞预警2026-10-22 发布LOW

OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fails for requests with form-encoded bodies or forwarded cert...

CVE-2026-115359

OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fail

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality...

CVE-2026-96364

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布INFO

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6...

CVE-2026-96364

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect

历史摘要 · 未重新核验 · NVD

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

CVE-2026-96364

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated ...

CVE-2026-107830

Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction en

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-08 发布INFO

Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sen...

CVE-2026-107830

Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction en

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint

CVE-2026-107830

Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction en

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-06 发布INFO

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects...

CVE-2026-82924

Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co.

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

CVE-2026-97300

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

CVE-2026-97300

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/Admi...

CVE-2026-105237

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication

CVE-2026-105237

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-26 发布INFO

ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and ...

CVE-2026-100603

ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation flow: four distinct ordina

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function get_client_ip of the file saleor/account/throttling.py. ...

CVE-2026-93650

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

Saleor throttling.py get_client_ip excessive authentication

CVE-2026-93650

A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.

CVE-2025-36045

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2....

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation, .github/workflows/disc.yml runs for the issues opened event and the issues e...

CVE-2026-54594

OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation, .github/workflows/d

历史摘要 · 未重新核验 · NVD