#cwe-862

共收录 4087 条相关情报。

← 返回所有主题
漏洞预警2026-09-23 发布INFO

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native fu...

CVE-2026-96454

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings fro

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications

CVE-2026-96454

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings fro

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-23 发布INFO

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This is due to the plugin not properly ve...

CVE-2026-6831

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim handler, allowing ...

CVE-2026-93510

The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or res

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with Subscriber-level ac...

CVE-2026-93508

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX acti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and abo...

CVE-2026-93507

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its payment-gateway configuration, allowi...

CVE-2026-87981

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX acti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch of its payment webhook, allowing unauthenticated attacke...

CVE-2026-87979

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and takes both the recipient address and ...

CVE-2026-87074

The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who cre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before running a one-time payment-field migration during the const...

CVE-2026-87069

The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before ru

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions, allowing users with Author-level...

CVE-2026-86842

The Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flip

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update...

CVE-2026-86785

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its RES

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check user capabilities when creating orders through its REST AP...

CVE-2026-84027

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allow...

CVE-2026-83555

The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modif...

CVE-2026-18364

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...

CVE-2026-18156

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass secur

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...

CVE-2026-18132

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unau

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated...

CVE-2026-17618

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and m

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper a...

CVE-2026-18156

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass secur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing authoriz...

CVE-2026-18132

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unau

历史摘要 · 未重新核验 · NVD