#cwe-266

共收录 540 条相关情报。

← 返回所有主题
漏洞预警2026-07-13 发布INFO

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <= 1.2.77.3.

CVE-2026-57813

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from...

CVE-2026-57768

Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: from n/a through <= 2.0.2.

CVE-2026-57410

Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.Thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1.

CVE-2026-57386

Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affec

历史摘要 · 未重新核验 · NVD

安全公告2026-07-13 发布INFO

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting...

CVE-2026-15510

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. T

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-13 发布INFO

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser...

CVE-2026-15509

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-12 发布INFO

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The at...

CVE-2026-15510

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布INFO

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role lead...

CVE-2026-15509

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON

历史摘要 · 未重新核验 · NVD

安全公告2026-07-12 发布INFO

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function...

CVE-2026-15499

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-12 发布INFO

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of the file astrbot/core/tools/cron_tools.py of the compone...

CVE-2026-15499

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of

历史摘要 · 未重新核验 · NVD

安全公告2026-07-12 发布INFO

A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is...

CVE-2026-15476

A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-12 发布MEDIUM

A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver....

CVE-2026-15476

CVE-2026-15476 影响 QILING Disk Master 6.0.0.0 版本,涉及内核驱动程序 diskbckp.sys 中的一个未知函数。该漏洞允许具有本地访问权限的攻击者利用不当的访问控制机制,可能导致部分机密性、完整

历史摘要 · 未重新核验 · NVD

安全公告2026-07-12 发布INFO

A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part...

CVE-2026-15471

A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability...

CVE-2026-15472

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some...

CVE-2026-15473

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is...

CVE-2026-15475

A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-12 发布INFO

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an...

CVE-2026-15474

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-12 发布MEDIUM

A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the component Signed Kernel Dri...

CVE-2026-15475

MiniTool Partition Wizard 至 13.6 版本中存在一个本地权限提升漏洞。该漏洞源于其签名内核驱动组件中的 pwdrvio.sys 库,具体位于未知函数中,由于不当的访问控制导致攻击者能够在本地利用该漏洞。攻击者需要

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布MEDIUM

A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Call Recording Handl...

CVE-2026-15474

Eleveo Call Recording Software 9.7.0 版本中存在一个安全漏洞,位于组件 Call Recording Handler 的文件 /callrec/audio.jsp 中。该漏洞源于对参数 callId 的操

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-12 发布MEDIUM

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Rec...

CVE-2026-15473

该漏洞存在于 Eleveo Call Recording Software 9.7.0 的 /callrec/restoreCallAction.do 文件中,属于 Recorded Calls 页面的一个未知处理过程。漏洞类型为不正确的授

历史摘要 · 未重新核验 · NVD