#cwe-862

共收录 3925 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on `POST /display...

CVE-2026-50543

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /...

CVE-2026-50542

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on `...

CVE-2026-50539

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who posse...

CVE-2026-116778

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1,

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/gi...

CVE-2026-59185

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` authenticates the token-management UI but fails to require administrator authoriz...

CVE-2026-59164

NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` authenticates the token-

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `PUT/D...

CVE-2026-52729

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /...

CVE-2026-50541

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embedded in Cache.This issue affects Redux Framework: from n/...

CVE-2026-116404

Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embe

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects...

CVE-2026-116393

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Con

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This ...

CVE-2026-116855

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting In

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3....

CVE-2026-110540

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password...

CVE-2026-110508

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement t

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3....

CVE-2026-103799

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86390

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布CRITICAL

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86397

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.2. This is due to the plugin not properly verifying...

CVE-2026-85655

The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.8. This is due to the plugin not properly...

CVE-2026-76058

The PayPal Brasil para WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering of server-side actions in all versions up to, and including...

CVE-2026-2839

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering of

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 due to a missing capability check on the CleanLogin_Shortcod...

CVE-2026-116610

The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 due

来源摘录 · NVD