#cwe-863
共收录 2104 条相关情报。
← 返回所有主题 漏洞预警2026-09-30 发布INFO
CVE-2026-103547
In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated
历史摘要 · 未重新核验 · NVD
安全公告2026-09-30 发布INFO
CVE-2026-103105
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API w
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-30 发布HIGH
CVE-2026-103105
CVE-2026-103105 是 Pexip Infinity 视频会议平台中的一个访问控制缺陷。根据描述,该产品内部使用的一个 API 接口存在权限校验不当(improper access control)问题,影响范围包括 38.2
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-30 发布INFO
CVE-2026-86101
An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SA
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-81842
An authenticated user with edit permission on one folder can move a library panel into another folder where they only ha
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-61519
Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending tea
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-102330
Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-102327
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who h
历史摘要 · 未重新核验 · NVD
安全公告2026-09-29 发布INFO
CVE-2026-61519
Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending tea
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-29 发布INFO
CVE-2026-95375
Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95374
Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95368
Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95358
Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95355
Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who ha
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95352
Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95340
Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95317
Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soc
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95314
Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95302
Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obt
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95292
Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass syst
历史摘要 · 未重新核验 · NVD