#cwe-269
共收录 809 条相关情报。
← 返回所有主题 漏洞预警2026-09-20 发布INFO
CVE-2026-92540
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users cap
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-20 发布INFO
CVE-2026-87068
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a r
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-20 发布INFO
CVE-2026-82842
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming
历史摘要 · 未重新核验 · NVD
安全公告2026-09-20 发布INFO
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-20 发布INFO
CVE-2026-86553
SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Us
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-20 发布INFO
CVE-2026-86552
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acqui
历史摘要 · 未重新核验 · NVD
安全公告2026-09-19 发布INFO
CVE-2026-86814
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an e
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-19 发布INFO
CVE-2026-76554
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-19 发布INFO
CVE-2026-86814
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an e
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-19 发布INFO
CVE-2026-76554
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-82893
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-18 发布INFO
CVE-2026-84089
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-18 发布INFO
CVE-2026-84083
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on t
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-18 发布INFO
CVE-2026-84089
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-84083
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-82893
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-18 发布INFO
CVE-2026-61781
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_tim
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-63349
AnyIO 4.14.0 accepts the POSIX extra_groups argument on anyio.run_process() and anyio.open_process(), but open_process()
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-18 发布INFO
CVE-2026-63349
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In
历史摘要 · 未重新核验 · NVD
安全公告2026-09-18 发布INFO
CVE-2026-63349
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In
历史摘要 · 未重新核验 · OSV.dev