#cwe-841
共收录 45 条相关情报。
← 返回所有主题 漏洞预警2026-10-31 发布MEDIUM
CVE-2026-109231
The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-30 发布LOW
CVE-2026-119558
OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-pr
来源摘录 · NVD
漏洞预警2026-10-22 发布MEDIUM
CVE-2026-115248
A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a
来源摘录 · NVD
漏洞预警2026-10-12 发布INFO
CVE-2026-108789
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-08 发布INFO
CVE-2026-19878
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-06 发布INFO
CVE-2026-104626
A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gite
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95385
Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95370
Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95369
Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially exe
历史摘要 · 未重新核验 · NVD
安全公告2026-09-23 发布INFO
CVE-2026-82406
**Location:** `core/kapp/market/market.go` — `Buy()` (approx. L281–436)\
**Severity:** High
The native marketplace enfo
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-23 发布INFO
CVE-2026-82406
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function c
历史摘要 · 未重新核验 · NVD
安全公告2026-09-23 发布INFO
CVE-2026-82406
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function c
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-22 发布INFO
CVE-2026-65126
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement o
历史摘要 · 未重新核验 · NVD
安全公告2026-09-11 发布INFO
CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CH
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-11 发布INFO
CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CH
历史摘要 · 未重新核验 · NVD
安全公告2026-09-05 发布INFO
CVE-2026-67279
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never att
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-05 发布INFO
CVE-2026-67279
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never att
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-29 发布MEDIUM
CVE-2026-82423
CVE-2026-82423 是开源电商项目 macrozheng mall(版本不超过 1.0.3)中存在的一处业务逻辑漏洞。该漏洞位于支付成功接口 /order/paySuccess 中,具体涉及未知函数对参数 orderId 的处理。
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-28 发布INFO
CVE-2026-55763
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfe
历史摘要 · 未重新核验 · NVD
安全公告2026-08-28 发布INFO
CVE-2026-55763
## Summary
In `processPercentageRoyaltiesTransfer` the royalty pool is collected from the sender by `SubFromBalance` tha
历史摘要 · 未重新核验 · GitHub Advisory