#cwe-266

共收录 540 条相关情报。

← 返回所有主题
漏洞预警2026-08-04 发布MEDIUM

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plug...

CVE-2026-18720

CVE-2026-18720 影响 kalcaddle kodbox 1.67 Build 02 的 msgWarning 插件。该漏洞位于 /index.php?plugin/msgWarning/action 文件中的未知代码,攻击者通

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86)\Razer\RzUpdateEn...

CVE-2026-18606

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown function

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the comp...

CVE-2026-18584

A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impact

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open...

CVE-2026-52791

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branc

历史摘要 · 未重新核验 · NVD

安全公告2026-07-26 发布INFO

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function...

CVE-2026-17434

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/mod

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-26 发布MEDIUM

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server....

CVE-2026-17434

CVE-2026-17434 影响 nanocoai NanoClaw 2.0.64 及之前版本,存在于组件 add_mcp_server 的 src/modules/self-mod/request.ts 文件中的 handleAddMc

历史摘要 · 未重新核验 · NVD

安全公告2026-07-26 发布INFO

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function...

CVE-2026-17433

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-26 发布INFO

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this...

CVE-2026-17432

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-26 发布MEDIUM

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component ...

CVE-2026-17433

CVE-2026-17433 影响 nanocoai NanoClaw 至 2.0.64 版本。漏洞位于 MCP Server Approval 组件的 src/channels/chat-sdk-bridge.ts 文件中的 create

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-26 发布MEDIUM

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex...

CVE-2026-17432

CVE-2026-17432 是 NousResearch hermes-agent 2026.6.5 版本中的一个高危漏洞。漏洞位于 hermes-agent/plugins/platforms/simplex/adapter.py 文件

历史摘要 · 未重新核验 · NVD

安全公告2026-07-24 发布INFO

A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function...

CVE-2026-16764

A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file do

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-21 发布INFO

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official mani...

CVE-2026-47237

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to versio

历史摘要 · 未重新核验 · NVD

安全公告2026-07-21 发布INFO

Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

CVE-2026-47237

Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to versio

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-20 发布INFO

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative o...

CVE-2026-21824

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user perso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布INFO

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. Th...

CVE-2026-16224

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

安全公告2026-07-19 发布INFO

jxxghp MoviePilot Application API improper authorization

CVE-2026-16224

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the fil

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-15 发布INFO

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github...

CVE-2026-50562

FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, ar

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function...

CVE-2026-15594

A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the l

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-13 发布INFO

A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handl...

CVE-2026-15594

A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the l

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

waooAI waoowaoo Media hash.ts stablePublicIdFromStorageKey improper authorization

CVE-2026-15594

A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the l

历史摘要 · 未重新核验 · OSV.dev