701 matches found
MSP360 Backup 安全漏洞
MSP360 Backup is a cross-platform data backup and recovery solution from MSP360, which supports hybrid backup with local storage and cloud storage and provides enterprise-level data protection. A security vulnerability exists in MSP360 Backup version 8.0, which stems from improper file system...
The vulnerability of Zabbix’s Web interface, the UI of the IT infrastructure monitoring system, allows a perpetrator to trigger a service failure or compromise the integrity of Zabbix’s Web interface resources.
The vulnerability of Zabbix’s Web interface, the monitoring system for IT infrastructure, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a malicious actor to cause service failures or compromise the integrity of Zabbix’s Web...
ROS-20250515-07
Vulnerability of RevertAction.Php, ApiFileRevert.Php files of MediaWiki hypertext environment implementation software is related to incorrect permissions saving. MediaWiki hypertext environment is related to incorrect permissions saving. Exploitation of the vulnerability could allow a remote...
CVE-2025-20961
Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to access files with system privilege...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component of the database management system involves the improper assignment of permissions to a critical resource. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
MediaWiki < 1.39.12, 1.40.x < 1.42.6, 1.43.x < 1.43.1 Multiple Vulnerabilities - Linux
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary cod...
Tenable Network Security Nessus Elevation of Privilege Vulnerability
Tenable Network Security Nessus is a network vulnerability scanning tool developed by Tenable Network Security to detect security vulnerabilities and configuration errors in operating systems, network devices, and applications. Tenable Network Security Nessus suffers from an elevation of privileg...
ABB Automation Builder 安全漏洞
ABB Automation Builder is an integrated engineering development environment from ABB Switzerland for unified programming and configuration of ABB programmable logic controllers PLCs, motion control and robotics systems. A security vulnerability exists in ABB Automation Builder version 2.8.0 and...
Vulnerability of the Server component: The Replication function of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server database management system’s replication component is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary cod...
PT-2025-18052 · Seiko Epson · Seiko Epson Printer Drivers
Name of the Vulnerable Software and Affected Versions: SEIKO EPSON printer drivers for Windows affected versions not specified Description: The issue concerns multiple SEIKO EPSON printer drivers for Windows OS, which are configured with improper access permission settings when installed or used ...
GO-2025-3639 Juju uses a UNIX domain socket without setting appropriate permissions in github.com/juju/juju
Juju uses a UNIX domain socket without setting appropriate permissions in github.com/juju/juju...
DEBIAN-CVE-2025-32696
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1...
DEBIAN-CVE-2025-32697
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki:...
CVE-2025-32697 Cascading protection is not preventing file reversions
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki:...
CVE-2025-32697
CVE-2025-32697 affects MediaWiki before 1.42.6 and 1.43.x before 1.43.1. The vulnerability is an Improper Preservation of Permissions in core, relating to files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, and includes/Permissions/RestrictionStore.Php. Ro...
CVE-2025-20935
Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access files with system privilege. User interaction is required for triggering this vulnerability...
The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Core component in Oracle VM VirtualBox relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and cause service failures...
