#cwe-862

共收录 3925 条相关情报。

漏洞预警2026-10-21 发布MEDIUM

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to ...

CVE-2026-114475

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a r

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in gp_add_coordinator_standby(). The function is...

CVE-2026-104949

WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_e...

CVE-2026-104948

WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backend_memory_contexts(). Any authenticate...

CVE-2026-104947

WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in fu

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in GradebookController that allows unauthenticated users to mo...

CVE-2026-114388

Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in Gr

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally in...

CVE-2026-70386

Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vul

来源摘录 · NVD

#cve #cwe-78 #cwe-862

安全公告2026-10-21 发布INFO

Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders...

CVE-2026-114082

Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write acc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:high

安全公告2026-10-21 发布INFO

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows...

CVE-2026-114071

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to co

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:low

安全公告2026-10-21 发布INFO

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows...

CVE-2026-114056

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:medium

安全公告2026-10-21 发布INFO

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt...

CVE-2026-114057

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that all

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:medium

安全公告2026-10-21 发布INFO

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt...

CVE-2026-114058

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that let

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:medium

漏洞预警2026-10-21 发布INFO

Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 stream credentials via ...

CVE-2026-114082

Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write acc

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布LOW

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint...

CVE-2026-114071

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to co

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read other databases' schema metada...

CVE-2026-114058

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that let

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布INFO

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. ...

CVE-2026-114057

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that all

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-21 发布MEDIUM

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UP...

CVE-2026-114056

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-20 发布HIGH

Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security seve...

CVE-2026-113128

Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origi

来源摘录 · NVD

#cve #cwe-862

安全公告2026-10-20 发布INFO

A2A Java SDK has a fail-open default task authorization

CVE-2026-111764

Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-862 #cwe-1188 #severity:high

漏洞预警2026-10-20 发布CRITICAL

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's ot...

CVE-2026-112380

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operat

来源摘录 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-10-20 发布INFO

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (t...

CVE-2026-111767

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862