#cwe-862

共收录 4228 条相关情报。

← 返回所有主题
漏洞预警2026-05-26 发布INFO

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipula...

CVE-2026-9603

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown

历史摘要 · 未重新核验 · NVD

安全公告2026-05-26 发布INFO

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing...

CVE-2025-14361

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-26 发布INFO

Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly...

CVE-2026-27331

Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Contro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-26 发布INFO

Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly...

CVE-2026-25444

Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Contr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-26 发布INFO

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce...

CVE-2026-25426

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-26 发布INFO

Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly...

CVE-2026-24520

Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Secu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects an unknown function. Performing a manipulation ...

CVE-2026-9582

A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job...

CVE-2026-48592

Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a broken access control vulnerability in the OSS file service URL fetch API (chat/ap...

CVE-2026-42337

MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a broken access control vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Woocommerce Env...

CVE-2025-14361

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n...

CVE-2026-27331

Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Contro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from...

CVE-2026-25444

Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Contr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue ...

CVE-2026-25426

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Tiktok Feed: from n/a th...

CVE-2026-24520

Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Secu

历史摘要 · 未重新核验 · NVD

安全公告2026-05-26 发布INFO

XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

CVE-2026-33137

### Impact `POST /wikis/{wikiName}` executes a XAR import without performing any authentication or authorization checks

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of...

CVE-2026-24190

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the u...

CVE-2026-47728

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: fro...

CVE-2026-24638

Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ...

CVE-2026-24590

Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Config

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from ...

CVE-2026-39655

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control

历史摘要 · 未重新核验 · NVD