#cwe-862

共收录 4228 条相关情报。

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endpoint allows users with the ...

CVE-2026-44562

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the P

历史摘要 · 未重新核验 · NVD

#cve #cwe-283 #cwe-862

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the type: "file" (non-full-context), type: "text" with collect...

CVE-2026-44560

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the t

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the GET /api/v1/channels/{id}/members endpoint only checks mem...

CVE-2026-44559

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the G

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the channel router does not call filter_allowed_access_grants ...

CVE-2026-44558

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the OpenAI router accepts any authe...

CVE-2026-44556

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-862

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI supports model composition via base_model_id: a use...

CVE-2026-44555

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/retrieval/process/web endpoint accepts a user...

CVE-2026-44554

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the P

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, FolderForm uses model_config = ConfigDict(extra='allow'), whic...

CVE-2026-44550

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Folde

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. An...

CVE-2026-46365

phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpo

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIsAuthenticated() instead of userHasPermission(CONFIGURATIO...

CVE-2026-45007

phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIs

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful. From 0.2.0 to before 0.10.0, collaborators.list, tables.metadata.list, explo...

CVE-2026-44719

Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful. From 0.2.0 to befor

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful. From 0.2.0 to before 0.10.0, explorations.get, explorations.replace, and exp...

CVE-2026-44718

Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful. From 0.2.0 to befor

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862

安全公告2026-05-15 发布INFO

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud...

CVE-2026-2031

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prio

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:critical

安全公告2026-05-15 发布INFO

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasourc...

CVE-2026-45717

## Summary Budibase exposes a REST API for datasource management. The route `PUT /api/datasources/:datasourceId` is reg

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-862 #severity:high

漏洞预警2026-05-15 发布INFO

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker...

CVE-2026-2031

An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prio

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-05-15 发布INFO

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for...

CVE-2026-7563

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to una

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:medium

安全公告2026-05-15 发布INFO

The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to...

CVE-2026-4094

The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss du

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:high

安全公告2026-05-15 发布INFO

The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification...

CVE-2026-4683

The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:medium

漏洞预警2026-05-15 发布INFO

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5....

CVE-2026-7563

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to una

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-15 发布INFO

The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endpoint in al...

CVE-2026-4683

The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

历史摘要 · 未重新核验 · NVD

#cve #cwe-862