#cwe-250

共收录 89 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` interpreter runs in Ring 0 with unrestricted kernel-memory ...

CVE-2026-40573

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` in

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data recei...

CVE-2025-30046

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run w

来源摘录 · NVD

漏洞预警2026-10-20 发布LOW

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). Supported versions that are affected ...

CVE-2026-91335

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

来源摘录 · NVD

漏洞预警2026-10-14 发布HIGH

The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a container, the coordin...

CVE-2026-104795

The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runti

来源摘录 · NVD

安全公告2026-10-14 发布INFO

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a...

CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtai

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布MEDIUM

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

CVE-2026-87709

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and contai...

CVE-2026-65162

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain...

CVE-2026-75621

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to ex

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-12 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.

CVE-2026-75621

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the c...

CVE-2026-108820

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-07 发布MEDIUM

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret res...

CVE-2026-107176

A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config

来源摘录 · NVD

漏洞预警2026-10-06 发布INFO

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code out...

CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR)...

CVE-2026-66246

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileg...

CVE-2026-102118

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.php of the component Database Manageme...

CVE-2026-102247

A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file ap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the Se...

CVE-2026-88808

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters

CVE-2026-88808

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-23 发布INFO

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute...

CVE-2026-87899

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root pr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

CVE-2026-87899

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to improper privilege management.

CVE-2026-19087

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalatio

历史摘要 · 未重新核验 · NVD