#cwe-841

共收录 45 条相关情报。

漏洞预警2026-08-28 发布INFO

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially cr...

CVE-2026-78618

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-841

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow stat...

CVE-2026-78103

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-08-26 发布MEDIUM

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app.

CVE-2026-15365

CVE-2026-15365 涉及儿童模式（Kids Mode）中某一功能的弹窗逻辑缺陷。该缺陷允许用户绕过密码验证，在应用外部使用快速应用（Quick Apps），从而突破家长控制的安全边界。目前，该漏洞仅有基础元数据，未提供 CVSS

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-08-26 发布INFO

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint (PATCH /api/teams/{id}), which removes all existing team mem...

CVE-2026-80195

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint (PA

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

安全公告2026-08-25 发布INFO

Kimai before 2.63.0 Team Membership Removal via API

CVE-2026-80195

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint (PA

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-841

漏洞预警2026-08-25 发布INFO

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially ex...

CVE-2026-79083

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker w

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-08-18 发布INFO

A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/account/rma/store. The manipulation of the argument rma_qty/res...

CVE-2026-75081

A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/accoun

历史摘要 · 未重新核验 · NVD

#cve #cwe-840 #cwe-841

漏洞预警2026-08-07 发布INFO

A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCore/TraderAdapter.h of the component Pending Order Handler...

CVE-2026-19213

A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCo

历史摘要 · 未重新核验 · NVD

#cve #cwe-840 #cwe-841

漏洞预警2026-08-07 发布INFO

A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulation of the argument ...

CVE-2026-19208

A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src

历史摘要 · 未重新核验 · NVD

#cve #cwe-840 #cwe-841

漏洞预警2026-08-06 发布INFO

A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update_lob of the file src/WtBtCore/MatchEngine.cpp of the compo...

CVE-2026-19037

A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update_

历史摘要 · 未重新核验 · NVD

#cve #cwe-840 #cwe-841

漏洞预警2026-07-28 发布INFO

Our payment integration with GiroCheckout did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and s...

CVE-2026-18029

Our payment integration with GiroCheckout did not properly validate payment status responses. An attacker could use a s

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

安全公告2026-07-09 发布INFO

Sylius: Cart FormComponent allows modification or deletion of an already-completed order

CVE-2026-53637

### Impact A user opens the cart page in the browser. In the background, the order gets completed, e.g. an admin changes

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-672 #cwe-841 #severity:medium

漏洞预警2026-06-30 发布INFO

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow.

CVE-2025-36333

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actio

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-06-25 发布INFO

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply ...

CVE-2026-57536

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a success

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-06-25 发布INFO

Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from...

CVE-2026-13223

Our payment integration with Computop-based payment methods did not properly validate payment status responses. An atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-06-25 发布INFO

Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from on...

CVE-2026-13222

Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-06-22 发布INFO

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, a flaw in the handling of recovery codes for app-based ...

CVE-2026-48505

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-841

漏洞预警2026-06-10 发布INFO

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.4.0, when LightBlockchain::rebranch() adopts a...

CVE-2026-46540

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-06-08 发布INFO

Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mode via an unsolici...

CVE-2026-43974

Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server t

历史摘要 · 未重新核验 · NVD

#cve #cwe-841

漏洞预警2026-05-28 发布INFO

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.59, POST /api/blocks/{block_id}/execute e...

CVE-2026-45023

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

历史摘要 · 未重新核验 · NVD

#cve #cwe-770 #cwe-841