#cwe-269

共收录 809 条相关情报。

← 返回所有主题
漏洞预警2026-09-20 发布INFO

The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users capability when assigning roles during a CSV import, allowin...

CVE-2026-92540

The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users cap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a registration form is nested inside an imported quiz, allow...

CVE-2026-87068

The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always re...

CVE-2026-82842

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

CVE-2026-93968

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-20 发布INFO

SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication par...

CVE-2026-86553

SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-20 发布INFO

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an ...

CVE-2026-86552

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acqui

历史摘要 · 未重新核验 · NVD

安全公告2026-09-19 发布INFO

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has...

CVE-2026-86814

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an...

CVE-2026-76554

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布INFO

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing accou...

CVE-2026-86814

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-19 发布INFO

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and assign roles, allowin...

CVE-2026-76554

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to...

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to...

CVE-2026-84089

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root...

CVE-2026-84083

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.

CVE-2026-84089

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privile...

CVE-2026-84083

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_time() reads the writable part_config.time_encoder text valu...

CVE-2026-61781

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_tim

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

CVE-2026-63349

AnyIO 4.14.0 accepts the POSIX extra_groups argument on anyio.run_process() and anyio.open_process(), but open_process()

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-18 发布INFO

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In 4.14.0, AnyIO accepts the POSIX extra_groups argument in ...

CVE-2026-63349

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In

历史摘要 · 未重新核验 · NVD

安全公告2026-09-18 发布INFO

AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

CVE-2026-63349

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In

历史摘要 · 未重新核验 · OSV.dev