#cwe-862

共收录 4122 条相关情报。

← 返回所有主题
漏洞预警2026-09-07 发布INFO

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data() without first checking whether the ...

CVE-2026-86451

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool:

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did no...

CVE-2026-86441

Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organis...

CVE-2026-86418

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the sa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). The query always fetched User.email, while redaction happe...

CVE-2026-86417

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perform stat...

CVE-2026-86416

ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view(). The vulnerable handler queried Cr...

CVE-2026-86408

Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated...

CVE-2026-61410

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user...

CVE-2026-12853

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. Thi

历史摘要 · 未重新核验 · NVD

安全公告2026-09-07 发布INFO

MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects

CVE-2026-86451

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool:

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-07 发布INFO

MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

CVE-2026-86441

Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation i

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-07 发布INFO

MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

CVE-2026-86418

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the sa

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-07 发布INFO

MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

CVE-2026-86417

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). T

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-07 发布INFO

MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events

CVE-2026-86408

Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKe

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-07 发布INFO

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry for templates/uploadFile used the wildcard *. This bypas...

CVE-2026-86347

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry

历史摘要 · 未重新核验 · NVD

安全公告2026-09-07 发布INFO

MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion

CVE-2026-86347

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-07 发布INFO

Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview performed correlation lookups against attributes from eve...

CVE-2026-86342

Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service ...

CVE-2026-86332

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResou

历史摘要 · 未重新核验 · NVD

安全公告2026-09-07 发布INFO

MISP Freetext Feed Preview Improper Authorization Exposes Restricted Event and Feed Information

CVE-2026-86342

Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. The preview

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-07 发布INFO

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation ...

CVE-2026-86281

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. This affects the function ExAutenticacaoController.autenticar of the file sigae...

CVE-2026-86274

A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. This affects the funct

历史摘要 · 未重新核验 · NVD