#cwe-266

共收录 540 条相关情报。

← 返回所有主题
漏洞预警2026-07-06 发布INFO

A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the component Survey Hand...

CVE-2026-14792

A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/mo

历史摘要 · 未重新核验 · NVD

安全公告2026-07-06 发布INFO

A security vulnerability has been detected in SourceCodester Onlne Examination & Learning...

CVE-2026-14778

A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This af

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the...

CVE-2026-14778

A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This af

历史摘要 · 未重新核验 · NVD

安全公告2026-07-05 发布INFO

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The...

CVE-2026-14719

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an u

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-05 发布INFO

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component...

CVE-2026-14719

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an u

历史摘要 · 未重新核验 · NVD

安全公告2026-07-05 发布INFO

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0....

CVE-2026-14693

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-05 发布INFO

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1...

CVE-2026-14690

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the fun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-05 发布MEDIUM

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master...

CVE-2026-14693

SourceCodester Multi-Vendor Online Grocery Management System 1.0 中存在一个不当授权漏洞。该漏洞位于文件 classes/Master.php 中的 cancel_order

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布HIGH

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This mani...

CVE-2026-14690

SourceCodester Multi-Vendor Online Grocery Management System 1.0 存在一个授权不当漏洞。该漏洞位于文件 classes/Users.php 中的 save_users 函数,攻

历史摘要 · 未重新核验 · NVD

安全公告2026-07-01 发布INFO

Keycloak has privilege escalation via improper scope mapping enforcement

CVE-2026-9795

### Description A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with li

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-01 发布INFO

A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user...

CVE-2026-5136

A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the call

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.

CVE-2026-57692

Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects Pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership endpoint. An authenticated user can modify their group m...

CVE-2026-53902

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership

历史摘要 · 未重新核验 · NVD

安全公告2026-07-01 发布INFO

Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without...

CVE-2026-56247

Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without validating role scope compa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-30 发布INFO

Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without validating role scope compatibility, including to pending invitees. Attackers can pr...

CVE-2026-56247

Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without validating role scope compa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This...

CVE-2026-4629

A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An...

CVE-2026-12388

A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user informati

历史摘要 · 未重新核验 · NVD

安全公告2026-06-29 发布INFO

A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function...

CVE-2026-13591

A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-29 发布INFO

A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/managers/ChannelBridge.ts of the component Contact Tracki...

CVE-2026-13591

A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_handler.php of the component Use...

CVE-2026-13568

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD