A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects...
CVE-2026-19918
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_statu
#cwe-266
共收录 540 条相关情报。
← 返回所有主题A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipul...
CVE-2026-19918
CVE-2026-19918 影响 SpaceX Starlink Router Gen 3（固件版本 2025.11.14.mr64708.3）。该漏洞位于设备的 gRPC 管理接口中，具体涉及 get_status 函数。由于该函数对访
A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to inco...
CVE-2026-19893
A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file...
CVE-2026-19841
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of th
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is...
CVE-2026-19835
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect de...
CVE-2026-19841
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of th
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such m...
CVE-2026-19835
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality
The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey. The self-targe...
CVE-2026-72826
The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subs
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is...
CVE-2026-72839
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default Cr
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants...
CVE-2026-72840
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/cro
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration...
CVE-2026-72840
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/cro
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can regist...
CVE-2026-72839
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default Cr
filebrowser through 2.63.16 Privilege Escalation via Signup
CVE-2026-72839
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default Cr
Gitea LFS Deploy-Key Privilege Escalation
CVE-2026-58435
Gitea LFS Deploy-Key Privilege Escalation
Gitea LFS Deploy-Key Privilege Escalation
CVE-2026-58435
Gitea LFS Deploy-Key Privilege Escalation
Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.
CVE-2026-66661
Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
CVE-2026-66424
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.
CVE-2026-27543
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.