#cwe-269

共收录 809 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布INFO

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileg...

CVE-2026-111582

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

CVE-2026-118008

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90729

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90728

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.

CVE-2026-117466

In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

CVE-2026-65220

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a ...

CVE-2026-117468

Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project...

CVE-2026-116806

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allow

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布HIGH

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app ter...

CVE-2026-113947

This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a m

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The ma...

CVE-2026-116471

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.

CVE-2026-106781

An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker

来源摘录 · NVD

安全公告2026-10-25 发布INFO

Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with...

CVE-2026-116162

Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-25 发布INFO

Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when issuing an SMS multi-factor authentication verification co...

CVE-2026-116162

Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when i

来源摘录 · NVD

安全公告2026-10-24 发布INFO

The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation...

CVE-2026-110018

The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordP

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-24 发布INFO

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor...

CVE-2026-115807

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-24 发布HIGH

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions...

CVE-2026-115807

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

来源摘录 · NVD

漏洞预警2026-10-22 发布CRITICAL

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses on...

CVE-2026-114612

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the...

CVE-2026-114658

Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布HIGH

Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super user accounts. Attack...

CVE-2026-114658

Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that grant cluster-wide im...

CVE-2026-110744

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based acc

历史摘要 · 未重新核验 · NVD