#cwe-250

共收录 89 条相关情报。

← 返回所有主题
漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management.

CVE-2026-17110

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker t

历史摘要 · 未重新核验 · NVD

安全公告2026-08-10 发布INFO

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the...

CVE-2026-18949

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Ac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-10 发布INFO

A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard...

CVE-2026-18982

A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-10 发布INFO

A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which...

CVE-2026-18608

A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permission

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Thr...

CVE-2026-18982

A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions gra...

CVE-2026-18949

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Ac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary...

CVE-2026-18608

A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permission

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands us...

CVE-2026-48098

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Vers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the ...

CVE-2026-67609

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalatio

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

When applying replicated changes for a row that is missing one or more columns, pglogical...

CVE-2026-50737

When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-28 发布INFO

When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber. Because the apply...

CVE-2026-50737

When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environ...

CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp security templates ge...

CVE-2026-15226

A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code ...

CVE-2026-13104

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could al

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared defau...

CVE-2026-15584

A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with differen...

CVE-2026-42486

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with differen...

CVE-2026-23562

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with differen...

CVE-2026-23561

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with differen...

CVE-2026-23560

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD