#cwe-862

共收录 3925 条相关情报。

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could create, move, edit, or delete sourcet...

CVE-2026-76296

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move field extractions or field trans...

CVE-2026-76294

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does no...

CVE-2026-76292

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsH...

CVE-2026-114135

Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-10-21 发布INFO

Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization

CVE-2026-114135

Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

漏洞预警2026-10-21 发布INFO

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and devmux_select_set(). When CONFIG_USERSPACE is enabled, the...

CVE-2026-19947

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and d

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in mis...

CVE-2026-114267

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-10-21 发布INFO

Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed ledger. The source topic is selected by setting the re...

CVE-2026-105937

Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's manag

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors endpoint (/a...

CVE-2026-105936

The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The...

CVE-2026-105935

The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied va

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/persistent/{tenant}/{namespace}/{topic}/truncate). Truncating a top...

CVE-2026-105934

The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/persistent

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a topic. For persistent topics these endpoints check th...

CVE-2026-105932

The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy o

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication and authorization are enabled, most of the read endpoint...

CVE-2026-105931

The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication

来源摘录 · NVD

#cve #cwe-862

安全公告2026-10-21 发布INFO

Missing kernel object permission check in devmux syscalls allows unprivileged user threads to retarget a device multiplexer

CVE-2026-19947

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and d

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

漏洞预警2026-10-21 发布INFO

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRo...

CVE-2026-114176

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configu

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new sch...

CVE-2026-105926

The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for

来源摘录 · NVD

#cve #cwe-862

安全公告2026-10-21 发布INFO

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

CVE-2026-114125

**Summary:** A malicious website may be able to cause unauthorized file changes in a developer’s project while an affect

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-22 #cwe-94 #cwe-96 #cwe-346

漏洞预警2026-10-21 发布LOW

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tab...

CVE-2026-113797

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布HIGH

Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confine...

CVE-2026-114489

Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose credential is confined to named do...

CVE-2026-114477

Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote au

来源摘录 · NVD

#cve #cwe-862