#cwe-1220

共收录 41 条相关情报。

漏洞预警2026-10-27 发布HIGH

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57202

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD

#cve #cwe-1220 #cwe-267

安全公告2026-10-27 发布INFO

Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes

CVE-2026-57202

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1220 #cwe-267

安全公告2026-10-22 发布INFO

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful...

CVE-2026-96372

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1220

漏洞预警2026-10-22 发布INFO

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96372

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167

CVE-2026-96372

Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1220

漏洞预警2026-10-20 发布INFO

A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana instance th...

CVE-2026-92539

A service account with user-management permissions in one organization can read, modify, disable or delete users belongi

历史摘要 · 未重新核验 · NVD

#cve #cwe-639 #cwe-863 #cwe-1220

安全公告2026-10-17 发布INFO

phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in...

CVE-2026-111885

phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1220 #severity:high

漏洞预警2026-10-13 发布HIGH

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83499

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri

来源摘录 · NVD

#cve #cwe-1220

漏洞预警2026-10-13 发布HIGH

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-81969

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri

来源摘录 · NVD

#cve #cwe-1220

漏洞预警2026-10-13 发布HIGH

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-70218

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privi

来源摘录 · NVD

#cve #cwe-1220 #cwe-285

漏洞预警2026-10-13 发布MEDIUM

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

CVE-2026-70216

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform

来源摘录 · NVD

#cve #cwe-1220

漏洞预警2026-10-13 发布INFO

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure ...

CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs

历史摘要 · 未重新核验 · NVD

#cve #cwe-441 #cwe-863 #cwe-1220

安全公告2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8,...

CVE-2026-14210

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1220 #severity:medium

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could ...

CVE-2026-14210

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

漏洞预警2026-09-16 发布INFO

Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced in a filter, it is replaced with an ex...

CVE-2026-86338

Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

漏洞预警2026-09-08 发布INFO

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.

CVE-2026-69267

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

漏洞预警2026-09-08 发布INFO

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66814

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a netw

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

漏洞预警2026-09-08 发布INFO

AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type (min, max, sum, avg) that builds an ad-hoc Ash.Query.Aggregate over a...

CVE-2026-78230

AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type (min, max, s

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

漏洞预警2026-09-08 发布INFO

AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min, max, first, sum, avg) that builds an ad-hoc Ash.Query.Agg...

CVE-2026-78216

AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min,

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220

漏洞预警2026-09-03 发布INFO

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a lo...

CVE-2026-15431

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The

历史摘要 · 未重新核验 · NVD

#cve #cwe-1220