#cwe-923

共收录 37 条相关情报。

← 返回所有主题
漏洞预警2026-08-07 发布INFO

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 may allow a remote un...

CVE-2026-18655

Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause...

CVE-2026-23904

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file operat...

CVE-2026-8920

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of pri...

CVE-2026-59841

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-10 发布INFO

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper...

CVE-2026-57028

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolve

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-10 发布INFO

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper...

CVE-2026-33803

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolve

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-09 发布INFO

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to ca...

CVE-2026-57028

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to ca...

CVE-2026-33803

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-23 发布MEDIUM

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferre...

CVE-2026-55655

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding

来源摘录 · NVD

漏洞预警2026-06-18 发布INFO

Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon...

CVE-2026-12539

Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-appl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-18 发布INFO

Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the hos...

CVE-2026-12039

Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without re...

CVE-2025-36145

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

Route Services can be leveraged to send app traffic to network destinations outside of an app's...

CVE-2026-22726

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between...

CVE-2025-36180

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-01 发布INFO

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudf...

CVE-2026-22726

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrict...

CVE-2025-36180

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow a

历史摘要 · 未重新核验 · NVD