#cwe-269

共收录 809 条相关情报。

漏洞预警2026-09-27 发布INFO

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit...

CVE-2026-101086

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-27 发布INFO

Nezha Dashboard before 2.3.5 Task Type Validation Bypass

CVE-2026-101086

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing aut

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-269

漏洞预警2026-09-27 发布INFO

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to anothe...

CVE-2026-89001

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is per

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-26 发布INFO

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege...

CVE-2026-77203

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions u

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:high

漏洞预警2026-09-26 发布INFO

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groups_joi...

CVE-2026-77203

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions u

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-26 发布INFO

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles acros...

CVE-2026-100686

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endp

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-26 发布INFO

Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Google OAuth, the CLI i...

CVE-2026-100620

Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onb

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-26 发布INFO

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikey_manager to rotate a higher-privileged org_super_admin sibling key...

CVE-2026-100615

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikey_manager

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-26 发布INFO

Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the apikey_manager organization role may bind to newly created API keys. When an authenticated us...

CVE-2026-100611

Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the apikey_manager organization role may

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-26 发布INFO

Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps

CVE-2026-100686

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endp

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-269

安全公告2026-09-26 发布INFO

Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service Account

CVE-2026-100620

Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onb

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-269

安全公告2026-09-26 发布INFO

Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

CVE-2026-100615

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikey_manager

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-269

安全公告2026-09-24 发布INFO

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege...

CVE-2026-18467

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:critical

漏洞预警2026-09-24 发布CRITICAL

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced ...

CVE-2026-18467

CVE-2026-18467 是 WordPress 插件 Paytium: Mollie payment forms & donations 中的权限提升漏洞，影响 5.0.3 及之前的所有版本。该插件用于在站点上搭建 Mollie 支付

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-23 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote ac...

CVE-2026-61413

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Managemen

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-23 发布INFO

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify...

CVE-2026-17472

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:critical

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...

CVE-2026-17645

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevate

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:critical

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.

CVE-2026-17645

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevate

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-22 发布INFO

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions.

CVE-2026-17472

IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources d

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-22 发布INFO

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ...

CVE-2026-76713

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful explo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:high