#cwe-862

共收录 4087 条相关情报。

漏洞预警2026-10-01 发布MEDIUM

The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their verifiers in drivers/smbus/smbus_handlers.c validated only th...

CVE-2026-17053

The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their veri

来源摘录 · NVD

#cve #cwe-862

安全公告2026-10-01 发布INFO

SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem

CVE-2026-73605

### Summary `/api/file/getUniqueFilename` takes a path from the request body and passes it to a filesystem existence ch

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:medium

安全公告2026-10-01 发布INFO

SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check

CVE-2026-73607

### Summary `/api/storage/getOutlineStorage` is registered with `CheckAuth` only and performs no authorization of any k

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:medium

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.

CVE-2026-97297

Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions.

CVE-2026-97281

Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Re...

CVE-2026-97280

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configur

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

CVE-2026-97277

Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.

CVE-2026-97258

Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions.

CVE-2026-62073

Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects...

CVE-2026-62063

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Con

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting I...

CVE-2026-103341

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Revi...

CVE-2026-103340

Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Ac

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Exploiting Incorrectly Configured Access Con...

CVE-2026-102390

Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-fo

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majesti...

CVE-2026-102381

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, by...

CVE-2026-103274

Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access t...

CVE-2026-103269

Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site membe

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. A...

CVE-2026-103268

Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactiv

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume re...

CVE-2026-103260

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-01 发布INFO

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for...

CVE-2026-103251

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulner

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-10-01 发布INFO

Ghost 5.3.0 before 6.58.0 Unauthenticated Comment Read

CVE-2026-103274

Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862