#cwe-266

共收录 542 条相关情报。

← 返回所有主题
安全公告2026-05-04 发布INFO

A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the...

CVE-2026-7709

A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-04 发布INFO

A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by...

CVE-2026-7713

A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py...

CVE-2026-7713

A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-03 发布INFO

A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpo...

CVE-2026-7709

A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_

历史摘要 · 未重新核验 · NVD

安全公告2026-05-03 发布INFO

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this...

CVE-2026-7686

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function po

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-03 发布INFO

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component...

CVE-2026-7686

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function po

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function...

CVE-2026-7644

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted...

CVE-2026-7631

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown fun

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-02 发布HIGH

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper ...

CVE-2026-7644

该漏洞存在于 ChatGPTNextWeb NextChat 至 2.16.1 版本中,源自文件 app/mcp/actions.ts 内的 addMcpServer 函数。由于对用户输入或请求的授权验证不充分,攻击者无需身份验证即可远程利

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-02 发布MEDIUM

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipula...

CVE-2026-7631

该漏洞存在于 code-projects Online Hospital Management System 1.0 中的注册处理程序(Registration Handler)组件,具体位于一个未知函数中。攻击者可以通过远程方式操纵 'U

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown...

CVE-2026-7602

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-01 发布INFO

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an...

CVE-2026-7505

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the co

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper au...

CVE-2026-7505

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the co

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an...

CVE-2026-7468

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component ...

CVE-2026-7468

A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software C...

CVE-2026-5141

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was determined in Wooey up to 0.13.2. The impacted element is the function add_or_update_script of the file wooey/api/scripts.py of the component API Endpoint. E...

CVE-2026-7142

A vulnerability was determined in Wooey up to 0.13.2. The impacted element is the function add_or_update_script of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4.

CVE-2026-22337

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manip...

CVE-2026-7109

A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoi...

CVE-2026-7093

A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown f

历史摘要 · 未重新核验 · NVD