#cwe-266

共收录 540 条相关情报。

← 返回所有主题
安全公告2026-08-21 发布INFO

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the...

CVE-2026-77795

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceControl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-21 发布INFO

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpel...

CVE-2026-77795

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceControl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the...

CVE-2026-77686

A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to r...

CVE-2026-75910

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipul...

CVE-2026-77036

A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayContro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function add_grade of the file /index.php. Perform...

CVE-2026-76999

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

CVE-2026-66682

Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.

CVE-2025-15689

Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布HIGH

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services,...

CVE-2026-11861

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Direct

来源摘录 · NVD

漏洞预警2026-08-19 发布INFO

Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.

CVE-2026-73390

Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.

CVE-2026-73347

Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.

历史摘要 · 未重新核验 · NVD

安全公告2026-08-19 发布INFO

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The...

CVE-2026-75978

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布MEDIUM

A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the function DataSourceController.add of the file DataSourceC...

CVE-2026-75978

CVE-2026-75978 影响 xianrendzw 开发的 EasyReport 报表工具,受影响版本为 2.0.17.0522_Beta 及之前版本。漏洞位于 DataSourceController.java 文件的 DataSo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.

CVE-2026-73350

Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.

CVE-2026-68568

Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Subscriber Privilege Escalation in The Grid <= 2.7.9.1 versions.

CVE-2026-28191

Subscriber Privilege Escalation in The Grid <= 2.7.9.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of t...

CVE-2024-14045

A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布MEDIUM

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of th...

CVE-2026-19986

CVE-2026-19986 是影响 Chrome 浏览器上 Adblock for Youtube 扩展程序(版本最高 7.2.1)的一个安全弱点。该漏洞位于 contentscript.js 文件中 updateDynamicRules

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-16 发布INFO

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the...

CVE-2026-19928

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/co

历史摘要 · 未重新核验 · NVD

安全公告2026-08-16 发布INFO

OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management

CVE-2026-19928

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/co

历史摘要 · 未重新核验 · OSV.dev