#cwe-862

共收录 3925 条相关情报。

← 返回所有主题
漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-...

CVE-2026-56835

PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its

来源摘录 · NVD

漏洞预警2026-10-23 发布HIGH

Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without special privileges to block or unblock a...

CVE-2026-25716

Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authentica

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/{uuid} that lets project-restricted clients ...

CVE-2026-115373

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

CVE-2026-113797

### Impact `chrome.tabs.query()` returned each tab's `url` and `title` to extensions that held neither the `tabs` permis

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布MEDIUM

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-adminis...

CVE-2026-114487

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 20

来源摘录 · NVD

漏洞预警2026-10-22 发布HIGH

EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unauthenticated attackers to manage other customers' addresses...

CVE-2026-115323

EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unaut

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue...

CVE-2026-96391

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This...

CVE-2026-96380

Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue...

CVE-2026-96386

Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This...

CVE-2026-87955

Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing....

CVE-2026-87954

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxono

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful...

CVE-2026-87943

Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing...

CVE-2026-84921

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects We

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing....

CVE-2026-84914

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue...

CVE-2026-84913

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This...

CVE-2026-84910

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Sear

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful...

CVE-2026-84912

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue...

CVE-2026-84916

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in...

CVE-2026-114661

OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布MEDIUM

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.

CVE-2026-96391

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST ver

来源摘录 · NVD