#cwe-863

共收录 2248 条相关情报。

漏洞预警2026-06-12 发布INFO

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to before version 9.9.1-alpha.3, the routeAllowList se...

CVE-2026-50008

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-12 发布INFO

Solidtime is an open-source time-tracking app. Prior to version 0.12.2, Solidtime defines an explicit invitations:view and members:view permissions that gates the official invit...

CVE-2026-47236

Solidtime is an open-source time-tracking app. Prior to version 0.12.2, Solidtime defines an explicit invitations:view a

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-12 发布INFO

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8...

CVE-2026-44173

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-12 发布INFO

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a sto...

CVE-2026-44169

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-12 发布INFO

Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management authorization when setting the schem...

CVE-2026-7387

Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to req

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-12 发布INFO

Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-level permission when patching protected default system r...

CVE-2026-6739

Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-12 发布INFO

The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never ...

CVE-2026-45831

The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project eva

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-12 发布INFO

Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4.4.7, there is a route-rule middleware bypass via case-se...

CVE-2026-53721

Nuxt is an open-source web development framework for Vue.js. From versions 3.11.0 to before 3.21.7 and 4.0.0 to before 4

历史摘要 · 未重新核验 · NVD

#cve #cwe-178 #cwe-863

漏洞预警2026-06-12 发布INFO

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the ...

CVE-2026-47195

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level p

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-11 发布INFO

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of a...

CVE-2026-47238

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can e

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-863

安全公告2026-06-11 发布INFO

OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop...

CVE-2026-53808

OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-863 #severity:medium

安全公告2026-06-11 发布INFO

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive...

CVE-2026-53807

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows au

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-863 #severity:high

漏洞预警2026-06-11 发布INFO

OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using provider aliases to compare against aliases instead of cano...

CVE-2026-53809

OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-11 发布INFO

OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows agent tool calls to set apply: true despite approvalPolicy...

CVE-2026-53808

OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows a

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-11 发布INFO

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip commands.allowFrom validation. ...

CVE-2026-53807

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows au

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

安全公告2026-06-11 发布INFO

DevGuard has improper authorization on public assets

CVE-2026-48089

### Impact On a DevGuard API instance with one or more **public assets**, any authenticated user — including users from

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-285 #cwe-863 #severity:high

漏洞预警2026-06-11 发布INFO

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.6.0, mcp-server-kubernetes exposes three environment variables (AL...

CVE-2026-46519

mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.6.0, mcp-

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-11 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could hav...

CVE-2026-6277

GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-11 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could...

CVE-2026-6269

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-11 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could ...

CVE-2026-3553

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, an

历史摘要 · 未重新核验 · NVD

#cve #cwe-863