#cwe-266

共收录 540 条相关情报。

← 返回所有主题
漏洞预警2026-10-10 发布INFO

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp ...

CVE-2026-106610

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2.

CVE-2026-106608

Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through ...

CVE-2026-96539

Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-...

CVE-2026-106145

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.

CVE-2026-95594

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Ca...

CVE-2026-48197

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

CVE-2026-39775

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

CVE-2026-39774

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

CVE-2026-39773

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

CVE-2026-39765

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

CVE-2026-39761

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

CVE-2026-39753

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.

CVE-2026-105070

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

CVE-2026-105058

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.

CVE-2026-104757

Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.

CVE-2026-104405

Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function...

CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown...

CVE-2026-105611

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blad

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service...

CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/syst...

CVE-2026-105611

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blad

历史摘要 · 未重新核验 · NVD