#cwe-863

共收录 2098 条相关情报。

漏洞预警2026-10-13 发布INFO

A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSign...

CVE-2026-69226

A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when s

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

安全公告2026-10-13 发布INFO

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

CVE-2026-77459

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-863

漏洞预警2026-10-13 发布INFO

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of the file changebo...

CVE-2026-109525

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this issue is some unknown functional...

CVE-2026-109524

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-10-13 发布INFO

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownvi...

CVE-2026-102832

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

历史摘要 · 未重新核验 · NVD

#cve #cwe-367 #cwe-863

安全公告2026-10-13 发布INFO

JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked

CVE-2026-102832

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-367 #cwe-863

漏洞预警2026-10-13 发布INFO

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_pattern...

CVE-2026-103028

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy p

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

安全公告2026-10-13 发布INFO

girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorization

CVE-2026-109525

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862 #cwe-863

安全公告2026-10-13 发布INFO

girishsaraf Online-Appointment-Booking-System Admin Display Pages showdoctor.php authorization

CVE-2026-109524

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862 #cwe-863

安全公告2026-10-13 发布INFO

SFTPGo source-side file-pattern filter bypass during copy operations

CVE-2026-103028

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy p

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-863

漏洞预警2026-10-13 发布INFO

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (AC...

CVE-2026-77362

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools d

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-863

漏洞预警2026-10-13 发布INFO

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path...

CVE-2026-77361

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-co

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-863

漏洞预警2026-10-13 发布INFO

Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration source. Attackers contr...

CVE-2026-74036

Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布INFO

Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and password policy inside a fal...

CVE-2026-74035

Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-13 发布INFO

Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected sec...

CVE-2026-74032

Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated u

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

安全公告2026-10-13 发布INFO

obsidian-tc symlink path mismatch bypasses read ACL restrictions

CVE-2026-77361

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-co

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-59 #cwe-863

安全公告2026-10-13 发布INFO

obsidian-tc bridge tools expose data outside the read ACL

CVE-2026-77362

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools d

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-863

安全公告2026-10-13 发布INFO

Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies

CVE-2026-74036

Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by fi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-863

安全公告2026-10-13 发布INFO

Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_user

CVE-2026-74035

Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-863

安全公告2026-10-13 发布INFO

Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions

CVE-2026-74032

Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated u

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-863