The Import and export users and customers plugin for WordPress is vulnerable to Privilege...
CVE-2026-86583
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up
#cwe-266
共收录 540 条相关情报。
← 返回所有主题The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and...
CVE-2026-86583
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the...
CVE-2026-96556
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the fi
A flaw was found in the automation-controller instance install-bundle endpoint....
CVE-2026-84716
A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administ
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of the ar...
CVE-2026-96556
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the fi
A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's...
CVE-2026-84716
A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administ
A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCT...
CVE-2026-94425
A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_1400
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects...
CVE-2026-94048
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of th
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted...
CVE-2026-94047
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function impor
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulati...
CVE-2026-94048
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of th
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of ...
CVE-2026-94047
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function impor
samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management
CVE-2026-94047
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function impor
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402....
CVE-2026-94036
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element i
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component ...
CVE-2026-94036
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element i
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of...
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing...
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/...
CVE-2026-93961
CVE-2026-93961 披露了 Dromara UJCMS 内容管理系统（版本至 12.3.1，含 12.3.1）中的一个不当授权（Improper Authorization）缺陷。受影响的具体组件为 ujcms-cms/src/m
AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
CVE-2026-63349
AnyIO 4.14.0 accepts the POSIX extra_groups argument on anyio.run_process() and anyio.open_process(), but open_process()
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In 4.14.0, AnyIO accepts the POSIX extra_groups argument in ...
CVE-2026-63349
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In