#cwe-863

共收录 2248 条相关情报。

← 返回所有主题
漏洞预警2026-07-08 发布INFO

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0, an authorization bypass vulnerability in OpenCTI allows...

CVE-2026-35210

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host vol...

CVE-2026-14896

HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volume

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have...

CVE-2026-13151

GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection

CVE-2026-35210

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260326.0

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

CVE-2026-58494

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

CVE-2026-8800

Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.8, message trace destination checks were applied to or...

CVE-2026-58254

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, an authenticated MQTT client could subscribe to th...

CVE-2026-58214

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, MQTT retained message delivery and QoS1+ durable r...

CVE-2026-58209

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions

CVE-2026-58211

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

NATS Server: MQTT retained and QoS replay bypass subscribe deny filters

CVE-2026-58209

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)

CVE-2026-58214

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check

CVE-2026-58254

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

SeaweedFS is a distributed storage system. In versions 4.08 through 4.33, requests signed with SigV4 service s3tables are routed to the S3Tables management API where authorizati...

CVE-2026-55873

SeaweedFS is a distributed storage system. In versions 4.08 through 4.33, requests signed with SigV4 service s3tables ar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any authenticated user including the viewer role to download Fri...

CVE-2026-54652

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any aut

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Frigate viewer can read logs exposing admin and camera credentials

CVE-2026-54652

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any aut

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-08 发布INFO

SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets

CVE-2026-55873

SeaweedFS is a distributed storage system. In versions 4.08 through 4.33, requests signed with SigV4 service s3tables ar

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

MISP’s importModule() path used getEnabledModule() to resolve a single import module by name, but this lookup did not enforce the per-organisation module restriction checked by ...

CVE-2026-60125

MISP’s importModule() path used getEnabledModule() to resolve a single import module by name, but this lookup did not en

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布MEDIUM

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope ins...

CVE-2026-56778

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint,

来源摘录 · NVD

漏洞预警2026-07-08 发布HIGH

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/new endpoint, which authorizes access using the workflow:r...

CVE-2026-56776

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/n

来源摘录 · NVD