#cwe-863

共收录 2267 条相关情报。

← 返回所有主题
漏洞预警2025-11-26 发布CRITICAL

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.

CVE-2025-55469

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator bac

来源摘录 · NVD

漏洞预警2025-07-23 发布HIGH

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local at...

CVE-2025-6018

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication

来源摘录 · NVD

漏洞预警2024-12-09 发布HIGH

An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network access may be able to create connection objects that trig...

CVE-2024-55579

An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network

来源摘录 · NVD

漏洞预警2024-10-24 发布HIGH

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication ...

CVE-2024-10295

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly

来源摘录 · NVD

漏洞预警2024-10-23 发布MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an au...

CVE-2024-20482

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerl

来源摘录 · NVD

漏洞预警2023-09-20 发布HIGH

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation o...

CVE-2023-4853

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly whe

来源摘录 · NVD

漏洞预警2023-08-07 发布MEDIUM

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The o...

CVE-2023-4194

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filt

来源摘录 · NVD