#cwe-841

共收录 45 条相关情报。

← 返回所有主题
漏洞预警2026-10-31 发布MEDIUM

The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation Token Reuse in versions up to, and including, 4.1.4. This...

CVE-2026-109231

The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布LOW

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free...

CVE-2026-119558

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-pr

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of the fi...

CVE-2026-115248

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a

来源摘录 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation le...

CVE-2026-108789

A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authenticati...

CVE-2026-19878

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting approval. When a later run...

CVE-2026-104626

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gite

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass syste...

CVE-2026-95385

Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium sec...

CVE-2026-95370

Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML...

CVE-2026-95369

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially exe

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

CVE-2026-82406

**Location:** `core/kapp/market/market.go` — `Buy()` (approx. L281–436)\ **Severity:** High The native marketplace enfo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed be...

CVE-2026-82406

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function c

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

CVE-2026-82406

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vul...

CVE-2026-65126

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement o

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CH

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-11 发布INFO

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentic...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CH

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

RouterOS SSH enters the connection protocol after a client-requested rekey even though user...

CVE-2026-67279

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never att

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-05 发布INFO

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a sess...

CVE-2026-67279

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-29 发布MEDIUM

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint...

CVE-2026-82423

CVE-2026-82423 是开源电商项目 macrozheng mall(版本不超过 1.0.3)中存在的一处业务逻辑漏洞。该漏洞位于支付成功接口 /order/paySuccess 中,具体涉及未知函数对参数 orderId 的处理。

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance ...

CVE-2026-55763

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfe

历史摘要 · 未重新核验 · NVD

安全公告2026-08-28 发布INFO

klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

CVE-2026-55763

## Summary In `processPercentageRoyaltiesTransfer` the royalty pool is collected from the sender by `SubFromBalance` tha

历史摘要 · 未重新核验 · GitHub Advisory