#cwe-266

共收录 540 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token ...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the compo...

CVE-2026-109605

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operat...

CVE-2026-65199

openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Disp...

CVE-2026-109520

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). ...

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of ...

CVE-2026-109143

A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function creden

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3...

CVE-2026-104661

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have...

CVE-2026-104661

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the com...

CVE-2026-108923

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the component Path Exception Mat...

CVE-2026-108899

A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/sr...

CVE-2026-108890

A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a manipulation of the...

CVE-2026-108835

A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the ar...

CVE-2026-108825

A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipu...

CVE-2026-108812

A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue...

CVE-2026-108795

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-12 发布INFO

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the compon...

CVE-2026-108795

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-11 发布INFO

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The ...

CVE-2026-108575

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.

CVE-2026-62022

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.

CVE-2026-39801

Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.

CVE-2026-96341

Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue af

历史摘要 · 未重新核验 · NVD