#cwe-862

共收录 3925 条相关情报。

← 返回所有主题

漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.54.0, quiz submission records are not adequately author...

CVE-2026-61805

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.Thi...

CVE-2026-119367

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent...

CVE-2026-62141

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting int...

CVE-2026-119710

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only th

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated auth...

CVE-2026-119707

SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write rout

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation that allows unauthenticated attackers to comment on non-public posts by bypa...

CVE-2026-119702

WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation that allows unauthe

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applyi...

CVE-2026-119287

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

CVE-2026-116407

Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Conf

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in...

CVE-2026-61739

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77,

来源摘录 · NVD

#cve #cwe-287 #cwe-862

漏洞预警2026-10-30 发布HIGH

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `POST /api/agent_data_store/upload` in `backend/app/data...

CVE-2026-61708

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,

来源摘录 · NVD

#cve #cwe-284 #cwe-639 #cwe-862

漏洞预警2026-10-30 发布INFO

An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP). A low-privileged authentic...

CVE-2026-119682

An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine S

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other pro...

CVE-2026-119665

WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionVi

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu managem...

CVE-2026-119654

DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate p

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autoc...

CVE-2026-119653

Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/...

CVE-2026-119648

Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFor...

CVE-2026-119482

Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.Thi...

CVE-2026-119368

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a ...

CVE-2026-116860

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Contr

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readRecord to replace the shared GraphQL schema via the read-only...

CVE-2026-119576

ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readReco

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API, where the PUT /wp-json/kirki/v1/pages/{page_id} route a...

CVE-2026-112347

Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API

来源摘录 · NVD

#cve #cwe-862