#cwe-269

共收录 809 条相关情报。

漏洞预警2026-09-02 发布INFO

The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficie...

CVE-2026-9055

The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Esca

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

安全公告2026-09-02 发布INFO

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had com

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-269

漏洞预警2026-09-02 发布INFO

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a ...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had com

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authenticatio...

CVE-2026-73779

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthen

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state o...

CVE-2026-73758

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required use...

CVE-2026-73755

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator use...

CVE-2026-73747

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges...

CVE-2026-73740

A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged use

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to cha...

CVE-2026-73730

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to upstream AFC d...

CVE-2026-73729

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to a...

CVE-2026-73725

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to chan...

CVE-2026-73724

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could a

历史摘要 · 未重新核验 · NVD

#cve #cwe-863 #cwe-269

漏洞预警2026-09-01 发布INFO

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low pri...

CVE-2026-73723

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Suc

历史摘要 · 未重新核验 · NVD

#cve #cwe-863 #cwe-269

漏洞预警2026-09-01 发布INFO

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator...

CVE-2026-73714

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploit

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker ...

CVE-2026-73713

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitati

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain...

CVE-2026-73711

A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitati

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-09-01 发布INFO

A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Pe...

CVE-2026-84115

A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/c

历史摘要 · 未重新核验 · NVD

#cve #cwe-266 #cwe-269

漏洞预警2026-09-01 发布INFO

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insuff...

CVE-2026-18550

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-08-31 发布INFO

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version...

CVE-2026-79744

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate end

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-862

安全公告2026-08-31 发布INFO

MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Global Security Configuration

CVE-2026-79744

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate end

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-269 #cwe-862