#cwe-648

共收录 9 条相关情报。

漏洞预警2026-10-20 发布INFO

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving pr...

CVE-2026-112177

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitte

历史摘要 · 未重新核验 · NVD

#cve #cwe-648

安全公告2026-09-16 发布INFO

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated,...

CVE-2026-76460

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to byp

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-648 #severity:critical

漏洞预警2026-09-16 发布INFO

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insuf...

CVE-2026-76460

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to byp

历史摘要 · 未重新核验 · NVD

#cve #cwe-648

漏洞预警2026-07-28 发布INFO

Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is a...

CVE-2026-63727

Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in th

历史摘要 · 未重新核验 · NVD

#cve #cwe-648

安全公告2026-07-04 发布INFO

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a...

CVE-2026-54424

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-648 #severity:high

漏洞预警2026-07-04 发布HIGH

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Parsec through v2026-05-04.0. ...

CVE-2026-54424

该漏洞存在于Unity Parsec（Windows版本）中，属于不当使用特权API导致权限提升的问题。攻击者无需用户交互（UI:N）且无需权限（PR:N）即可利用该漏洞，通过控制AppData环境变量，使parsecd.exe以NT AU

历史摘要 · 未重新核验 · NVD

#cve #cwe-648

漏洞预警2026-06-24 发布INFO

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

CVE-2026-11877

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue aff

历史摘要 · 未重新核验 · NVD

#cve #cwe-648

漏洞预警2026-05-26 发布INFO

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC...

CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-267 #cwe-270 #cwe-648

漏洞预警2026-05-13 发布INFO

A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running arbi...

CVE-2026-41225

A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role

历史摘要 · 未重新核验 · NVD

#cve #cwe-648