#cwe-269

共收录 809 条相关情报。

漏洞预警2026-09-10 发布INFO

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload...

CVE-2026-84042

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-10 发布INFO

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the...

CVE-2026-81431

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during re

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/{id}/delete in backend/open_webui/router...

CVE-2026-87998

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-863

安全公告2026-09-09 发布INFO

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

CVE-2026-87998

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-269 #cwe-863

漏洞预警2026-09-09 发布INFO

A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Success...

CVE-2026-73788

A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privile

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-09 发布INFO

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin...

CVE-2026-76801

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulne

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:high

漏洞预警2026-09-08 发布INFO

Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

CVE-2026-68830

Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host all

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-269

漏洞预警2026-09-08 发布INFO

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66818

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-08 发布INFO

A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: [create, get, list, update, watch] across all namespaces. While the operator uses a controller-ru...

CVE-2026-77968

A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: [create, get, list, update, watch] acros

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-08 发布INFO

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role....

CVE-2026-86516

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-269

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-80166

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269 #severity:high

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An unauth...

CVE-2026-80166

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on...

CVE-2026-14444

The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. A low pri...

CVE-2026-80178

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component

CVE-2026-85640

Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdate

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path.

CVE-2026-77699

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to l

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction

CVE-2026-77697

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Ext

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade.

CVE-2026-77698

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.p...

CVE-2026-86275

A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-269

漏洞预警2026-09-06 发布CRITICAL

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to ...

CVE-2026-86153

根据 NVD 元数据，CVE-2026-86153 影响 Tenda CP3 固件版本 27.5.57.101。该漏洞位于 Functions/Redirect.cpp 文件中的 CRedirServer::SetRedirectEnabl

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-269