16 matches found
CVE-2026-32009
OpenClaw versions prior to 2026.2.24 contain a policy bypass vulnerability in the safeBins allowlist evaluation that trusts static default directories including writable package-manager paths like /opt/homebrew/bin and /usr/local/bin. An attacker with write access to these trusted directories can...
CVE-2026-32009 OpenClaw < 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBins
OpenClaw versions prior to 2026.2.24 contain a policy bypass vulnerability in the safeBins allowlist evaluation that trusts static default directories including writable package-manager paths like /opt/homebrew/bin and /usr/local/bin. An attacker with write access to these trusted directories can...
CVE-2024-32009
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges...
CVE-2024-32009
creationtimestamp| type| source ---|---|--- 2025-11-12 00:02:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5fdxdmaxx2q 2025-11-12 00:35:45+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5ffs36pvz72 2025-11-13 11:00:00+00:00| seen|...
CVE-2024-32009
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges...
CVE-2025-32009
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused...
CVE-2023-32009
creationtimestamp| type| source ---|---|--- 2023-06-14 07:36:35+00:00| seen| https://t.me/cibsecurity/65220...
CVE-2023-32009
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability...
Microsoft Windows Multiple Vulnerabilities (KB5027215)
This host is missing an important security update according to Microsoft KB5027215 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-32009
Technical details for CVE-2023-32009 are not publicly available in the provided documents. No affected products, root cause, or remediation are stated here. Monitor for updates.
CVE-2021-32009
Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...
CVE-2021-32009
Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...
CVE-2021-32009 Missing XSS guards on firmware page
Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...
CVE-2021-32009
CVE-2021-32009 is a documented XSS vulnerability affecting Secomea GateManager firmware page. The issue (titled Missing XSS guards on firmware page) permits a logged-in user to inject JavaScript into the browser session. Affected software: GateManager Version 9.6.621421014 and all prior versions....