#cwe-863

共收录 2248 条相关情报。

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can...

CVE-2026-49219

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-78 #cwe-200 #cwe-863

漏洞预警2026-06-10 发布INFO

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delet...

CVE-2026-53738

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handli

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-10 发布LOW

An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass...

CVE-2026-24724

CVE-2026-24724 是一个影响 QNAP File Station 6 的授权不当漏洞。根据 NVD 描述，远程攻击者在获取用户账户后，可利用此漏洞绕过预期的访问限制，可能获取未授权的文件访问权限。官方已在 File Statio

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

安全公告2026-06-09 发布INFO

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect...

CVE-2026-48303

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerabil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-863 #severity:critical

安全公告2026-06-09 发布INFO

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization...

CVE-2026-47929

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could resu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-863 #severity:high

漏洞预警2026-06-09 发布INFO

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the ...

CVE-2026-48303

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-09 发布INFO

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curr...

CVE-2026-47929

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could resu

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-09 发布INFO

Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. An attacker could exploit t...

CVE-2026-47910

Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead t

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-09 发布INFO

A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which m...

CVE-2026-41852

A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocati

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-08 发布INFO

Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user holding only the granular `users.edit` permission to lock e...

CVE-2026-48507

Snipe-IT is an IT asset/license management system. A vulnerability in versions prior to 8.6.0 allows a non-admin user ho

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-08 发布INFO

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than th...

CVE-2026-7765

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-08 发布INFO

A flaw was found in Keycloak. A limited administrator can exploit an improper access control vulnerability in the POST /admin/realms/{realm}/partialImport endpoint. This allows ...

CVE-2026-11577

A flaw was found in Keycloak. A limited administrator can exploit an improper access control vulnerability in the POST /

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-05 发布INFO

Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerabi...

CVE-2026-21031

Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. U

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-04 发布INFO

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for custo...

CVE-2026-42547

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-04 发布INFO

Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_shells` as the approved shell list that customers may assign...

CVE-2026-41235

Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_she

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-04 发布CRITICAL

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of...

CVE-2026-41283

CVE-2026-41283 是 OpenStack Mistral 工作流服务中的一个严重漏洞，影响版本至 22.0.0。当 Mistral API 暴露于网络时，未经授权的攻击者（需低权限）可通过特定端点执行任意远程代码（RCE），从而

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-03 发布INFO

Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

CVE-2025-14774

Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-02 发布INFO

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE ...

CVE-2026-44654

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a sha

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-02 发布INFO

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, a sandbox escape vulnerability in the alf....

CVE-2026-35482

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to versio

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-06-02 发布INFO

A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function TeamTasksTool.executeComplete of the file internal/tools/team_tasks_...

CVE-2026-10616

A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function TeamTasksTo

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-863