#cwe-863

共收录 2104 条相关情报。

← 返回所有主题
漏洞预警2026-09-30 发布INFO

In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client file descriptor an...

CVE-2026-103547

In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a...

CVE-2026-103105

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API w

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布HIGH

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node withi...

CVE-2026-103105

CVE-2026-103105 是 Pexip Infinity 视频会议平台中的一个访问控制缺陷。根据描述,该产品内部使用的一个 API 接口存在权限校验不当(improper access control)问题,影响范围包括 38.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain u...

CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SA

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or t...

CVE-2026-81842

An authenticated user with edit permission on one folder can move a library panel into another folder where they only ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional attacker-controlled acc...

CVE-2026-61519

Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending tea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy v...

CVE-2026-102330

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execut...

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who h

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

Liberu CRM 0.9.1 < 10.0.0 Broken Access Control via TeamPolicy::addTeamMember()

CVE-2026-61519

Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending tea

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via ...

CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security seve...

CVE-2026-95374

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a...

CVE-2026-95368

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via ...

CVE-2026-95358

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute...

CVE-2026-95355

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chr...

CVE-2026-95352

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a cra...

CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted...

CVE-2026-95317

Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions vi...

CVE-2026-95314

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium s...

CVE-2026-95302

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chro...

CVE-2026-95292

Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass syst

历史摘要 · 未重新核验 · NVD