#cwe-269

共收录 809 条相关情报。

← 返回所有主题
漏洞预警2026-09-22 发布INFO

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could allow an authenticate...

CVE-2026-76713

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful explo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive ...

CVE-2026-83597

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %U...

CVE-2026-83598

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powe

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution

CVE-2026-83597

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-22 发布INFO

Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

CVE-2026-83598

Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powe

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-22 发布INFO

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to...

CVE-2026-19915

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a ...

CVE-2026-12470

The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to unauthorized modificatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This is due to a chained flaw: the populat...

CVE-2026-13355

The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and incl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布INFO

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCT...

CVE-2026-94425

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_1400

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulati...

CVE-2026-94048

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of ...

CVE-2026-94047

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function impor

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

CVE-2026-94047

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function impor

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-20 发布INFO

The Import and export users and customers WordPress plugin before 2.5.2 does not correctly...

CVE-2026-92540

The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users cap

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters...

CVE-2026-86554

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the...

CVE-2026-92541

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion...

CVE-2026-82842

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it...

CVE-2026-87068

The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a r

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication ...

CVE-2026-86554

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing...

CVE-2026-93968

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in its front-end import functionality, allowing users with ...

CVE-2026-92541

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in

历史摘要 · 未重新核验 · NVD