#cwe-693

共收录 445 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System ...

CVE-2026-55304

In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges ...

CVE-2026-55302

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional executio...

CVE-2026-0189

In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege wit...

CVE-2026-0187

In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execut...

CVE-2026-0186

In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-servers/python/python_sandbox_server/...

CVE-2026-53710

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server po...

CVE-2026-91949

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function() i...

CVE-2026-57138

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText() before invo...

CVE-2026-57137

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the first whitespace-de...

CVE-2026-57136

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-ts/src/cli/features/sandbox-executor.ts uses buildEnv() o...

CVE-2026-57135

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, SandboxExecutor network-isolated mode in src/praisonai-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the first whitespace-de...

CVE-2026-57133

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scri...

CVE-2026-47424

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.

CVE-2026-86894

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to bre

历史摘要 · 未重新核验 · NVD

安全公告2026-09-11 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code...

CVE-2026-76059

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assi...

CVE-2026-76059

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua...

CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcemen...

CVE-2026-0306

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct explo...

CVE-2026-54694

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a s

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover

CVE-2026-54694

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a s

历史摘要 · 未重新核验 · OSV.dev