855 matches found
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller, related to the improper assignment of permissions for critical resources, allows a intruder to execute arbitrary code.
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...
Vulnerable-Docker-Engine
CVE-2021-41091 Этот эксплойт предлагает подробный анализ уязвимости CVE-2021-41091 и содержит пошаговое руководство по использованию скрипта эксплойта для повышения привилегий на хосте. Сводка уязвимости CVE-2021-41091 — это ошибка в Moby Docker Engine, которая позволяет непривилегированным...
CVE-2026-87660
A vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) due to improper file permissions and missing authorization . An unprivileged local user can exploit this to invoke privileged hardware tests , force system er...
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
EUVD-2026-94697
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
PT-2026-107803
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
The vulnerabilities of the `extractAllTo()` and `extractEntryTo()` functions in the Node.js library for working with zip files, Adm-zip, allow attackers to escalate their privileges.
The vulnerability of the extractAllTo and extractEntryTo functions in the Node.js library for working with zip files, Adm-zip, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
CentOS Linux 6 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776346717)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776346717 advisory. - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation...
PT-2026-97536
Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension versions prior to 1.47.0 Description Improper handling of insufficient permissions or privileges allows accessing functionality not properly constrained by Access Control Lists ACLs, which are sets of rules tha...
ROS-20260922-73-0128
The vulnerability in golang-x-crypto is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260921-73-0116
The vulnerability of the NewKeyring function in the Go programming language is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
CVE-2026-54471
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers allows a hacker to escalate their privileges and execute arbitrary code. This vulnerability is present in programs like cPanel & WHM, Plesk.
The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers is related to improperly used standard permissions. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...
CVE-2026-1759
An improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows privilege escalation . The affected versions are 11.5 and 11.4.625515072 . The issue is fixed in version 11.6 or 11.4.626194074 and above. The CVSS 3.1 score is 6.5 (Medium) with a network a...
ROS-20260911-73-0167
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...