#cwe-862

共收录 4228 条相关情报。

← 返回所有主题

漏洞预警2026-07-17 发布INFO

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.17.6. This ...

CVE-2026-15349

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to authorization b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin...

CVE-2026-13765

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

The Fense Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce validation on the fense...

CVE-2026-8616

The Fense Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin...

CVE-2026-62232

Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FAS

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:critical

安全公告2026-07-17 发布INFO

OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device...

CVE-2026-62218

OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature tha

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:high

安全公告2026-07-17 发布INFO

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows...

CVE-2026-62207

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reac

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:high

安全公告2026-07-17 发布INFO

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability...

CVE-2026-62205

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:medium

安全公告2026-07-17 发布INFO

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord...

CVE-2026-62206

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affect

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:medium

漏洞预警2026-07-17 发布INFO

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that allows authenticated users with only api.access permission ...

CVE-2026-62235

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that al

历史摘要 · 未重新核验 · NVD

#cve #cwe-636 #cwe-862

漏洞预警2026-07-17 发布INFO

grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints, allowing non-super api.users.write managers to escalate...

CVE-2026-62233

grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862

漏洞预警2026-07-17 发布INFO

Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task checks only user existence, not authorization,...

CVE-2026-62232

Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FAS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature that allows lower-trust callers to bypass role-management ch...

CVE-2026-62218

OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature tha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers can perform actions requi...

CVE-2026-62207

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input pat...

CVE-2026-62206

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled an...

CVE-2026-62205

OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Grav Flex-Objects < 1.4.3 Authorization Bypass via API

CVE-2026-62235

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that al

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-636 #cwe-862

安全公告2026-07-17 发布INFO

grav-plugin-api < 1.0.6 Privilege Escalation via createApiKey

CVE-2026-62233

grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-639 #cwe-862

安全公告2026-07-17 发布INFO

Grav < 2.0.4 2FA Bypass via Secret Regeneration

CVE-2026-62232

Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FAS

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-07-17 发布INFO

OpenClaw 2026.1.20 < 2026.5.27 Authorization Bypass via device.pair.approve

CVE-2026-62218

OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature tha

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-07-17 发布INFO

OpenClaw < 2026.6.5 Authentication Bypass via Admin Tools

CVE-2026-62207

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reac

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862