#cwe-862

共收录 3925 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests

CVE-2026-106176

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or com

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatc...

CVE-2026-85990

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read u...

CVE-2026-110131

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id}

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/con...

CVE-2026-110123

Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated low-privileged employees to modify system-wide level...

CVE-2026-110117

SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because t...

CVE-2026-110110

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via PO...

CVE-2026-110109

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/stora...

CVE-2026-110108

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage obje

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to reach admin routes because PermissionMidware.check permits r...

CVE-2026-110105

B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to rea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated user to import days off into any contract from an arbitra...

CVE-2026-110100

Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime and exportEmployees actions, allowing any authenticated us...

CVE-2026-110099

Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W...

CVE-2026-109898

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Confi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configure...

CVE-2026-109896

Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integratio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels...

CVE-2026-109890

Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploit

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints

CVE-2026-110131

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id}

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS Config Endpoints

CVE-2026-110123

Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController

CVE-2026-110117

SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authentic

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disable Endpoints

CVE-2026-110110

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec Save

CVE-2026-110109

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API

CVE-2026-110108

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage obje

历史摘要 · 未重新核验 · OSV.dev