#cwe-862

共收录 3962 条相关情报。

← 返回所有主题
漏洞预警2026-10-09 发布INFO

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prof...

CVE-2026-96337

Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

CVE-2026-96334

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

CVE-2026-95597

Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Conf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorr...

CVE-2026-95589

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access coul...

CVE-2026-76769

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnera

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/...

CVE-2026-97075

Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite...

CVE-2026-88931

The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receives, allowing unauthenticated attackers to mark orders pla...

CVE-2026-87841

The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receiv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two of its AJAX actions, which are also available to unauthen...

CVE-2026-86850

The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snipp...

CVE-2026-106095

The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management ac

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over...

CVE-2026-83947

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization...

CVE-2026-107792

Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToFo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-08 发布INFO

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

CVE-2026-83947

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToForumAction that allows authenticated users to move other u...

CVE-2026-107792

Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToFo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Pr...

CVE-2026-107725

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.1

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

Indico: Missing access check in legacy session export API

CVE-2026-107395

### Impact A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

Hazelcast has an authorization bypass in IMap Predicates API

CVE-2026-107725

### Impact Missing authorization checks in the [Predicates API](https://docs.hazelcast.com/hazelcast/5.7/query/predicat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

Hazelcast: Authorization bypass in IMap Predicates API

CVE-2026-107725

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.1

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-08 发布INFO

PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass

CVE-2026-61442

# Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass ## Summary `p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

CVE-2026-61427

## Summary PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaul

历史摘要 · 未重新核验 · GitHub Advisory