共收录 27 条相关情报。
← 返回所有主题CVE-2026-44832
Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated user with only users.edit permissio
CVE-2026-24194
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improp
CVE-2026-34744
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior permit a user to list and downl
CVE-2026-34600
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions 3.5.2
CVE-2026-25850
in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak
CVE-2025-8325
The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/E
CVE-2026-44832
### Impact An authenticated user with only `users.edit` permission can escalate their own privileges to `admin` by sendi