Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right
CVE-2026-56241
Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to del
#cwe-285
共收录 628 条相关情报。
← 返回所有主题A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Call Recording Handl...
CVE-2026-15474
Eleveo Call Recording Software 9.7.0 版本中存在一个安全漏洞，位于组件 Call Recording Handler 的文件 /callrec/audio.jsp 中。该漏洞源于对参数 callId 的操
A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Rec...
CVE-2026-15473
该漏洞存在于 Eleveo Call Recording Software 9.7.0 的 /callrec/restoreCallAction.do 文件中，属于 Recorded Calls 页面的一个未知处理过程。漏洞类型为不正确的授
A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/composeEmailAction.do. Executing a manipulat...
CVE-2026-15472
Eleveo Call Recording Software 9.7.0 版本中存在一个安全漏洞，涉及文件 /callrec/composeEmailAction.do 的未知代码。攻击者可以通过远程方式利用该漏洞，执行特定操作导致未授权访
A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci_dss_status.jsp. Performing a manipulation results in imp...
CVE-2026-15471
Eleveo Call Recording Software 9.7.0 版本中存在一个未授权访问漏洞，位于 /callrec/pci_dss_status.jsp 文件中。攻击者利用该漏洞可绕过授权检查，获取受限资源（如PCI DSS状态
A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation le...
CVE-2026-15470
Eleveo呼叫录音软件9.7.0版本存在一个不当授权漏洞，具体位于/callrec/group.jsp文件中。该漏洞允许远程已认证攻击者绕过授权检查，访问或修改未授权的资源，可能导致敏感信息泄露。漏洞细节已在公开渠道披露，增加了被利用的风
Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid...
CVE-2026-56240
Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows o
Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows organizations with exhausted or expired usage credit grant...
CVE-2026-56240
Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows o
Capgo - Billing Authorization Bypass via Exhausted Usage Credits
CVE-2026-56240
Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows o
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and column metadata without applying the document's acces...
CVE-2026-55664
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table
A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipul...
CVE-2026-15377
A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown fun
A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/statisticReportAction.do. The manipulation results in imp...
CVE-2026-15376
A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/
A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /callrec/users_ldap.jsp of the component LDAP User Interface...
CVE-2026-15375
A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /ca
A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/roleAddAction.do of the component Group Interface. Executing...
CVE-2026-15374
A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/rol
A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the file /callrec/userAddAction.do. Performing a manipulatio...
CVE-2026-15373
A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the
tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies
CVE-2026-49977
### Summary tarteaucitron provides a list of cookies and buttons to delete them. If an attacker can write HTML with dat
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some...
CVE-2026-15318
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of t
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT C...
CVE-2026-15318
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of t
Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class definition creation endpoint POST /pimcore-studio/api/class...
CVE-2026-55212
Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class de
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_automation rehydrated automation owners without recheckin...
CVE-2026-59226
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_