#cwe-267

共收录 22 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1.

CVE-2026-114524

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57202

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD

安全公告2026-10-27 发布INFO

Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes

CVE-2026-57202

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker...

CVE-2026-96390

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This...

CVE-2026-96371

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This...

CVE-2026-96367

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This...

CVE-2026-96363

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96371

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96367

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布LOW

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96363

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161

CVE-2026-96363

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

CVE-2026-96367

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-22 发布INFO

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166

CVE-2026-96371

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-13 发布INFO

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Disp...

CVE-2026-109520

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting request...

CVE-2026-96659

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH.

CVE-2026-18858

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications v...

CVE-2026-81161

Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles...

CVE-2025-36255

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue aff...

CVE-2026-6816

An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC...

CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute

历史摘要 · 未重新核验 · NVD