#cwe-862

共收录 4228 条相关情报。

← 返回所有主题
漏洞预警2026-05-27 发布INFO

Budibase is an open-source low-code platform. Prior to 3.38.2, packages/worker/src/api/routes/global/scim.ts attaches only two middlewares to the SCIM router: requireSCIM (check...

CVE-2026-46425

Budibase is an open-source low-code platform. Prior to 3.38.2, packages/worker/src/api/routes/global/scim.ts attaches on

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Budibase is an open-source low-code platform. Prior to 3.38.1, Budibase exposes a REST API for datasource management. The route PUT /api/datasources/:datasourceId is registered ...

CVE-2026-45717

Budibase is an open-source low-code platform. Prior to 3.38.1, Budibase exposes a REST API for datasource management. Th

历史摘要 · 未重新核验 · NVD

安全公告2026-05-27 发布INFO

Kirby CMS's content locks disclose IDs and emails of inaccessible users from `users.access/list` permissions

CVE-2026-45334

### TL;DR This vulnerability affects all Kirby sites that restrict the visibility of users for certain roles via the `u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling

CVE-2026-45260

### Summary Pimcore's WebDAV asset endpoint exposes a `MOVE` operation through `/asset/webdav{path}` without adding an a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-27 发布INFO

Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: f...

CVE-2026-49054

Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization mi...

CVE-2026-44329

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. On top of...

CVE-2026-44328

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization....

CVE-2026-44327

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-influence API without inbound OAuth2/bearer-token authoriz...

CVE-2026-44326

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. The POST ...

CVE-2026-44321

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-callback route group without inbound OAuth2/bearer-token authoriza...

CVE-2026-44320

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-callback

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-management API without inbound OAuth2/bearer-token authorizati...

CVE-2026-44315

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-manag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM p...

CVE-2026-42083

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl missing authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Acco...

CVE-2022-41656

Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured

历史摘要 · 未重新核验 · NVD

安全公告2026-05-27 发布INFO

Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting...

CVE-2026-49051

Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting Incorrectly Configured

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured...

CVE-2026-49047

Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured Access Control Securit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Missing Authorization vulnerability in Benbodhi SVG Support allows Exploiting Incorrectly...

CVE-2026-48973

Missing Authorization vulnerability in Benbodhi SVG Support allows Exploiting Incorrectly Configured Access Control Secu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting...

CVE-2026-49052

Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly...

CVE-2026-49045

Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly Configured Access Control Secur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-27 发布INFO

Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting...

CVE-2026-49053

Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured

历史摘要 · 未重新核验 · GitHub Advisory