#cwe-266

共收录 540 条相关情报。

漏洞预警2026-07-12 发布MEDIUM

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/composeEmailAction.do. Executing a manipulat...

CVE-2026-15472

Eleveo Call Recording Software 9.7.0 版本中存在一个安全漏洞，涉及文件 /callrec/composeEmailAction.do 的未知代码。攻击者可以通过远程方式利用该漏洞，执行特定操作导致未授权访

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-07-12 发布MEDIUM

A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci_dss_status.jsp. Performing a manipulation results in imp...

CVE-2026-15471

Eleveo Call Recording Software 9.7.0 版本中存在一个未授权访问漏洞，位于 /callrec/pci_dss_status.jsp 文件中。攻击者利用该漏洞可绕过授权检查，获取受限资源（如PCI DSS状态

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

安全公告2026-07-12 发布INFO

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is...

CVE-2026-15470

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functiona

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-266 #severity:low

漏洞预警2026-07-12 发布MEDIUM

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation le...

CVE-2026-15470

Eleveo呼叫录音软件9.7.0版本存在一个不当授权漏洞，具体位于/callrec/group.jsp文件中。该漏洞允许远程已认证攻击者绕过授权检查，访问或修改未授权的资源，可能导致敏感信息泄露。漏洞细节已在公开渠道披露，增加了被利用的风

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-07-10 发布INFO

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipul...

CVE-2026-15377

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-07-10 发布INFO

A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/statisticReportAction.do. The manipulation results in imp...

CVE-2026-15376

A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-07-10 发布INFO

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /callrec/users_ldap.jsp of the component LDAP User Interface...

CVE-2026-15375

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /ca

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-07-10 发布INFO

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/roleAddAction.do of the component Group Interface. Executing...

CVE-2026-15374

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/rol

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-07-10 发布INFO

A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the file /callrec/userAddAction.do. Performing a manipulatio...

CVE-2026-15373

A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285

安全公告2026-07-10 发布INFO

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the...

CVE-2026-15319

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-266 #severity:medium

漏洞预警2026-07-10 发布INFO

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_control.go of the comp...

CVE-2026-15319

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

安全公告2026-07-10 发布INFO

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450,...

CVE-2026-15271

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 u

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-266 #severity:high

漏洞预警2026-07-09 发布INFO

Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link UR...

CVE-2026-57501

Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-07-09 发布INFO

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown fun...

CVE-2026-15271

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 u

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-272

安全公告2026-07-09 发布INFO

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this...

CVE-2026-15270

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-266 #severity:medium

漏洞预警2026-07-09 发布INFO

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component We...

CVE-2026-15270

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-272

漏洞预警2026-07-09 发布INFO

A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affected by this vulnerability is the function EditEmployeeProf...

CVE-2026-15188

A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-284

漏洞预警2026-07-09 发布INFO

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limi...

CVE-2026-33390

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors r

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-07-07 发布INFO

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that t...

CVE-2026-26053

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-07-06 发布INFO

A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function actionGetNewUsersData of the file src/controllers/ChartsController.php of the c...

CVE-2026-14794

A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function actionGetNewUsersData

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-285