#cwe-269

共收录 809 条相关情报。

漏洞预警2026-09-15 发布INFO

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.

CVE-2026-92062

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.

CVE-2026-92055

Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thun

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.

CVE-2026-92053

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 15

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.

CVE-2026-92047

Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.

CVE-2026-92033

Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 1...

CVE-2026-92017

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and...

CVE-2026-92015

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This is due to a combination of two flaws: (1) the masterstudy...

CVE-2026-14805

The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.2...

CVE-2026-75983

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privile

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-15 发布INFO

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the componen...

CVE-2026-90856

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts a

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-269

漏洞预警2026-09-14 发布INFO

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27...

CVE-2026-64753

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-11 发布INFO

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java_keystore_passwd parameter. An authenticated user with Puppet adminis...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java_keystore_pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-78 #cwe-269

漏洞预警2026-09-11 发布INFO

The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role adm...

CVE-2026-74925

The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-11 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service...

CVE-2026-87958

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functiona

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:high

安全公告2026-09-11 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape...

CVE-2026-75777

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to un

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:high

漏洞预警2026-09-10 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user...

CVE-2026-87958

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functiona

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-10 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the contai...

CVE-2026-75777

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to un

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-10 发布INFO

IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in i...

CVE-2026-9327

IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-10 发布INFO

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers wit...

CVE-2026-88891

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members t

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-10 发布INFO

capgo.app (npm package `capgo`) through version 12.207.1 does not compare the caller's role rank against the requested role in the validateInvite() function of supabase/function...

CVE-2026-88863

capgo.app (npm package `capgo`) through version 12.207.1 does not compare the caller's role rank against the requested r

历史摘要 · 未重新核验 · NVD

#cve #cwe-269