AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
CVE-2026-63349
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In
#cwe-266
共收录 540 条相关情报。
← 返回所有主题A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/[...path]/+server.ts of the component User Attribute Update Endpoint. ...
CVE-2026-93504
A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/[...path]/+se
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resul...
CVE-2026-73461
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated us
Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowing authenticated users to supply arbitrary organization I...
CVE-2026-91930
Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowi
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the componen...
CVE-2026-90856
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts a
A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID c...
CVE-2026-90851
A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includ
A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-...
CVE-2026-90810
A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.
CVE-2026-62106
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.
Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.
CVE-2026-62102
Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.
Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-s...
CVE-2026-8303
Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software
Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.
CVE-2026-81805
Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux, 64 bit allows Privilege Escalation and Parameter Injectio...
CVE-2026-77654
Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall Analyzer) on Linux,
Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands. This allowed...
CVE-2026-85400
Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configu
Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX <= 6.1.4 versions.
CVE-2026-81792
Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX <= 6.1.4 versions.
A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role....
CVE-2026-86516
A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown fun
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the...
CVE-2026-86512
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/M
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/f...
CVE-2026-86512
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/M
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project...
CVE-2026-86500
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant th
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege...
CVE-2026-86482
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin
CVE-2026-86500
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant th