#cwe-862

共收录 4122 条相关情报。

漏洞预警2026-09-10 发布HIGH

Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite allows Exploiting Incorrectly Configured Access Control ...

CVE-2026-81799

Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.

CVE-2026-81794

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in Salon booking system <= 10.31.5 versions.

CVE-2026-81793

Unauthenticated Broken Access Control in Salon booking system <= 10.31.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.

CVE-2026-81788

Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.

CVE-2026-81786

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions.

CVE-2026-81785

Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce <= 1.8.9 versions.

CVE-2026-78536

Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce <= 1.8.9 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-09-10 发布INFO

AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint

CVE-2026-88898

AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoin

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

漏洞预警2026-09-10 发布INFO

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template ca...

CVE-2026-88915

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-09-10 发布INFO

MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization

CVE-2026-88915

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR.

CVE-2026-88271

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated.

CVE-2026-88270

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR.

CVE-2026-88269

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administ

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does n...

CVE-2026-78361

The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation ch

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names...

CVE-2026-77770

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a valid

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly ver...

CVE-2026-18594

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable() function in versions up ...

CVE-2026-15823

The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin no...

CVE-2026-14873

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in b...

CVE-2026-87997

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /ap

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862

漏洞预警2026-09-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the channel branch of chat_completion in backend/open_webui/main.p...

CVE-2026-87994

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the chann

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-862