#cwe-862

共收录 3939 条相关情报。

漏洞预警2026-10-11 发布INFO

Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_document that allows authenticated users to read linked documen...

CVE-2026-108734

Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_docume

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted expire_allocation method...

CVE-2026-108733

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted get_account_and_amount m...

CVE-2026-108732

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the can_only_join_via_...

CVE-2026-108731

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py that skip the workspace membership check. Authenticated ...

CVE-2026-108730

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows holders of scoped API tokens to bypass token scope restr...

CVE-2026-108727

EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omittin...

CVE-2026-108726

GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privile

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, loc...

CVE-2026-108720

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to vi

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without use...

CVE-2026-108718

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authoriz

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass profile grants by supp...

CVE-2026-108717

Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to create and modify EmailMarketing records via the...

CVE-2026-108713

SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allows authenticated non-admin users to view other users...

CVE-2026-108712

SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /norni...

CVE-2026-108710

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-data

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-10-11 发布INFO

Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes

CVE-2026-108756

Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet

CVE-2026-108745

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web ses

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation

CVE-2026-108742

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that le

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document

CVE-2026-108734

Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_docume

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocation

CVE-2026-108733

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amount

CVE-2026-108732

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

安全公告2026-10-11 发布INFO

Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass

CVE-2026-108731

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862