#cwe-862
共收录 3962 条相关情报。
← 返回所有主题 漏洞预警2026-10-09 发布INFO
CVE-2026-96337
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configur
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-96334
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-95597
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Conf
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-95589
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-pa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-76769
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnera
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-97075
Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Cont
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-88931
The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-87841
The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receiv
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-86850
The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-09 发布INFO
CVE-2026-106095
The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management ac
历史摘要 · 未重新核验 · NVD
安全公告2026-10-09 发布INFO
CVE-2026-83947
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-09 发布INFO
CVE-2026-107792
Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToFo
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-08 发布INFO
CVE-2026-83947
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-08 发布INFO
CVE-2026-107792
Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToFo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-08 发布INFO
CVE-2026-107725
Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.1
历史摘要 · 未重新核验 · NVD
安全公告2026-10-08 发布INFO
CVE-2026-107395
### Impact
A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description an
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-08 发布INFO
CVE-2026-107725
### Impact
Missing authorization checks in the [Predicates API](https://docs.hazelcast.com/hazelcast/5.7/query/predicat
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-08 发布INFO
CVE-2026-107725
Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.1
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-08 发布INFO
CVE-2026-61442
# Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
## Summary
`p
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-08 发布INFO
CVE-2026-61427
## Summary
PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaul
历史摘要 · 未重新核验 · GitHub Advisory