#cwe-266

共收录 540 条相关情报。

← 返回所有主题
漏洞预警2026-06-29 发布INFO

Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.

CVE-2026-22078

Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perfor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality of the file /api/users of the component API. This manipulation causes improp...

CVE-2026-13544

A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality of the file /api/us

历史摘要 · 未重新核验 · NVD

安全公告2026-06-29 发布INFO

A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This...

CVE-2026-13524

A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-29 发布INFO

A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of ...

CVE-2026-13524

A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown cod

历史摘要 · 未重新核验 · NVD

安全公告2026-06-29 发布INFO

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function...

CVE-2026-13511

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-28 发布INFO

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory...

CVE-2026-13511

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-27 发布HIGH

The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set at the point where ...

CVE-2026-49413

该漏洞影响 FreeBSD 的 Linuxulator(Linux 兼容层)。Linuxulator 在确定一个二进制文件是否为 set-user-ID 或 set-group-ID 时,依赖于进程标志 P_SUGID。然而,在 execv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-27 发布HIGH

sigqueue(2) was marked as permitted in capability mode with the introduction of Capsicum in 2011, but the implementation of kern_sigqueue did not include a capability mode check...

CVE-2026-45259

该漏洞涉及FreeBSD的Capsicum沙盒机制中的sigqueue(2)系统调用。Capsicum是FreeBSD引入的一种轻量级沙盒模型,用于限制进程的能力。2011年,sigqueue(2)被标记为允许在capability模式下调

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.

CVE-2026-56033

Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.

CVE-2026-56030

Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 versions.

CVE-2026-56028

Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 vers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

CVE-2026-56010

Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布INFO

Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.

CVE-2026-56008

Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-23 发布INFO

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the teto...

CVE-2026-12164

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or el

历史摘要 · 未重新核验 · NVD

安全公告2026-06-22 发布INFO

A security flaw has been discovered in Browserbase up to 20260526. This impacts an unknown...

CVE-2026-12823

A security flaw has been discovered in Browserbase up to 20260526. This impacts an unknown function of the component Aut

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-22 发布INFO

A security flaw has been discovered in Browserbase up to 20260526. This impacts an unknown function of the component Autobrowse Trace Artifact Handler. The manipulation results ...

CVE-2026-12823

A security flaw has been discovered in Browserbase up to 20260526. This impacts an unknown function of the component Aut

历史摘要 · 未重新核验 · NVD

安全公告2026-06-21 发布INFO

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that...

CVE-2026-56251

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-21 发布INFO

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users to elevate privileges from admin to super_admin. Attacke...

CVE-2026-56251

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users

历史摘要 · 未重新核验 · NVD

安全公告2026-06-21 发布INFO

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this...

CVE-2026-12799

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_vi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-21 发布INFO

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_view_users of the file litellm/proxy/management_endpoints/i...

CVE-2026-12799

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_vi

历史摘要 · 未重新核验 · NVD