#cwe-266

共收录 540 条相关情报。

← 返回所有主题
漏洞预警2026-08-12 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have a...

CVE-2025-9486

GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of ...

CVE-2026-64639

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (cu

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes...

CVE-2026-71468

A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated...

CVE-2026-71468

A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly

历史摘要 · 未重新核验 · NVD

安全公告2026-08-10 发布INFO

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user...

CVE-2026-15467

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-10 发布INFO

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges...

CVE-2026-18621

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security harde

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the ...

CVE-2026-18621

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security harde

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar contai...

CVE-2026-15467

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the compo...

CVE-2026-19381

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unkn

历史摘要 · 未重新核验 · NVD

安全公告2026-08-10 发布INFO

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the...

CVE-2026-19376

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布HIGH

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. ...

CVE-2026-19376

CVE-2026-19376 是 Uasoft Badaso 3.0.0-alpha 版本中存在的一处权限管理漏洞。该漏洞位于组件 File API 的 src/Routes/api.php 文件中的 ApiRequest::class 函

历史摘要 · 未重新核验 · NVD

安全公告2026-08-09 发布INFO

A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this...

CVE-2026-19359

A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function...

CVE-2026-19360

A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunctio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability...

CVE-2026-19358

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultF

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-09 发布INFO

A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunction of the component Lambda Function Handler. Performing a ...

CVE-2026-19360

A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunctio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of the component Lambda Function H...

CVE-2026-19359

A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access control...

CVE-2026-19358

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultF

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function...

CVE-2026-19244

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of the file nanobot/agent/tools/mcp.py of the component MCP e...

CVE-2026-19244

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The m...

CVE-2026-19195

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in th

历史摘要 · 未重新核验 · NVD