#cwe-862

共收录 4167 条相关情报。

漏洞预警2026-08-13 发布INFO

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type....

CVE-2026-6470

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-13 发布INFO

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish...

CVE-2026-73609

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that ret

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-13 发布HIGH

SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4-alpha.3) contains a missing-authorization vulnerability ...

CVE-2026-73608

SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-08-13 发布INFO

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that performs no authorization checks. Attackers can...

CVE-2026-73607

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endp

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-13 发布INFO

SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existence without valida...

CVE-2026-73605

SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anony

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-13 发布INFO

Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to abuse private chatflow TTS credentials. Unauthen...

CVE-2026-73603

Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-13 发布INFO

The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, a...

CVE-2026-14332

The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or non

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-13 发布INFO

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/h...

CVE-2026-49819

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-esc

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-269 #cwe-306 #cwe-862

漏洞预警2026-08-12 发布MEDIUM

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, FUXA `1.3.0-2773` still allows guest and invalid-token requests to read proj...

CVE-2026-47718

FUXA 是一个基于 Web 的流程可视化（SCADA/HMI/Dashboard）软件，广泛应用于工业控制系统的监控和管理。本漏洞存在于 FUXA 1.3.0-2773 版本中，当配置项 secureEnabled 设置为 true（即启

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-862

安全公告2026-08-12 发布INFO

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low...

CVE-2026-73326

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access a