#cwe-693

共收录 445 条相关情报。

← 返回所有主题
漏洞预警2026-08-16 发布INFO

Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be...

CVE-2026-74790

Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused T

历史摘要 · 未重新核验 · NVD

安全公告2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-14 发布INFO

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary ...

CVE-2026-18428

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenti

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

SQL Query Validation Bypass in OpenSearch Direct Query

CVE-2026-18428

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenti

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-13 发布INFO

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unaut...

CVE-2026-0293

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/object_lock/objectlock_sys.rs lets ...

CVE-2026-73288

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crat

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

CVE-2026-62902

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-11 发布INFO

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's P...

CVE-2026-73217

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapp...

CVE-2026-73083

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-69278

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布MEDIUM

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.

CVE-2026-62902

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information

来源摘录 · NVD

漏洞预警2026-08-11 发布INFO

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-54981

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged sof...

CVE-2026-39452

Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applicatio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software ...

CVE-2026-28757

Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a...

CVE-2026-28707

Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escala

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivile...

CVE-2026-24693

Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User App

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged soft...

CVE-2026-21400

Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Application

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary wit...

CVE-2026-21387

Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an esc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged...

CVE-2026-20906

Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applic

历史摘要 · 未重新核验 · NVD