#cwe-269

共收录 809 条相关情报。

← 返回所有主题
漏洞预警2026-08-18 发布INFO

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper ac...

CVE-2026-73974

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0.0, check-plugins/logfile/logfile accepted a free-form --...

CVE-2026-73973

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0

历史摘要 · 未重新核验 · NVD

安全公告2026-08-18 发布INFO

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

CVE-2026-73974

## Summary Every Linuxfabrik check plugin that supports the shared `--test` argument (routed through `lib.lftest.test()`

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-18 发布INFO

A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Ad...

CVE-2026-75924

A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布HIGH

CodeWhale versions >= 0.3.10 and < 0.8.64 (published as deepseek-tui >= 0.3.10 and < 0.8.41 on npm and 0.3.10 through 0.8.41 on crates.io, and as codewhale / codewhale-tui >= 0....

CVE-2026-75857

CodeWhale versions >= 0.3.10 and = 0.3.10 and = 0.8.41 and < 0.8.64) contain a vulnerability in the exec_shell_interact

来源摘录 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14,...

CVE-2026-74965

Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.1...

CVE-2026-74953

Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154 and Thunderbird 154.

CVE-2026-74952

Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154 and Thunderbird 15

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74950

Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird...

CVE-2026-74942

Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140...

CVE-2026-74941

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 14

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, T...

CVE-2026-74939

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, T...

CVE-2026-74935

Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the authenticated principal to asynchronous command worker threads. When an HTTP...

CVE-2026-75851

ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the authenticated princ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the set_server_setting MCP server-level tool. SetServerSettingTool.execute() gates only ...

CVE-2026-75845

ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the set_server_setting MCP serv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

ArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor thread in beginTransaction, allowing authenticated readers to execute JavaScrip...

CVE-2026-75843

ArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor thread in beginTransac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restriction. A delegated admin.users operator can save a ...

CVE-2026-75837

Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/server/api/routers/organizatio...

CVE-2026-45790

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's organization.inviteMember tRPC

历史摘要 · 未重新核验 · NVD

安全公告2026-08-17 发布INFO

SkyPilot fails to validate that authenticated users are entitled to grant administrator roles...

CVE-2026-75481

SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service acco

历史摘要 · 未重新核验 · GitHub Advisory