#cwe-862

共收录 3925 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry there can hold a password or name a password file or clie...

CVE-2026-116245

libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布INFO

Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak` checks only that `datum.head_id` matches the at...

CVE-2026-62162

Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/de

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a ...

CVE-2026-62122

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent...

CVE-2026-62056

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe...

CVE-2026-62047

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting I...

CVE-2026-62023

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: fr...

CVE-2026-62019

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Acc

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.

CVE-2026-54850

Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.

CVE-2026-116862

Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.

CVE-2026-116853

Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.

CVE-2026-116410

Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.

CVE-2026-116401

Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a ...

CVE-2026-104674

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 This is due to the plugin not properly verifying that a u...

CVE-2026-13747

The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostC...

CVE-2026-119763

changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attacker

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. T...

CVE-2026-109592

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorizati

来源摘录 · NVD

漏洞预警2026-10-30 发布HIGH

The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.14...

CVE-2026-107630

The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authoriz

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe...

CVE-2026-62055

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly

来源摘录 · NVD

漏洞预警2026-10-30 发布CRITICAL

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/api/plex/oauth.py` omits `@authenticate` on its Resource h...

CVE-2026-61826

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/a

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.54.2, unpublished certificate records can be retrieved ...

CVE-2026-61806

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev