#cwe-266

共收录 540 条相关情报。

← 返回所有主题
安全公告2026-10-06 发布INFO

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown...

CVE-2026-105571

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an...

CVE-2026-105610

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblad...

CVE-2026-105610

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding...

CVE-2026-105571

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update_subaccount of the file php/con...

CVE-2026-105382

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Che...

CVE-2026-105284

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.

CVE-2026-103752

Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Subscriber Privilege Escalation in ByteCoreStack &#8211; MCP Connector for AI Tools <= 1.2.2 versions.

CVE-2026-103068

Subscriber Privilege Escalation in ByteCoreStack &#8211; MCP Connector for AI Tools <= 1.2.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-pri...

CVE-2026-103286

Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that a

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notifications

CVE-2026-103286

Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-01 发布INFO

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes

CVE-2026-103494

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared L...

CVE-2026-103532

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

CVE-2026-103532

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-30 发布INFO

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated ...

CVE-2026-102129

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant t

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

A vulnerability was detected in gedelumbung HospitalManagement up to...

CVE-2026-102846

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-30 发布INFO

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file applicatio...

CVE-2026-102846

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, windows opened from ...

CVE-2026-102674

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

CVE-2026-102674

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Bac...

CVE-2026-102293

A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the...

CVE-2026-101860

A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::a

历史摘要 · 未重新核验 · GitHub Advisory