698 matches found
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-27688
Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-27688
Dell ThinOS 2408 and earlier contain an improper permissions vulnerability that can lead to local elevation of privilege by a low-privileged attacker with local access. The issue arises from improper privilege settings in the OS (as described across multiple sources). Affected product: Dell ThinO...
USN-7351-1: RESTEasy vulnerabilities
Nikos Papadopoulos discovered that RESTEasy improperly handled URL encoding when certain errors occur. An attacker could possibly use this issue to modify the app's behavior for other users through the network. CVE-2020-10688 Mirko Selber discovered that RESTEasy improperly validated user input...
CVE-2024-53011
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
CVE-2024-53011
Information disclosure may occur due to improper permission and access controls to Video Analytics engine...
The vulnerability of the Xerox Workplace Suite print server, related to the improper use of standard permissions, allows a malicious actor to gain access to read, modify, or delete data.
The vulnerability of the Xerox Workplace Suite print management server is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data remotely...
The vulnerability of the SharedFileList component in MacOS operating systems allows a perpetrator to compromise the integrity of protected information.
The vulnerability of the SharedFileList component in MacOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
The vulnerability in the formDMZ.cgi script of the D-Link DIR-816A router’s software allows a attacker to execute arbitrary code.
The vulnerability of the formDMZ.cgi script in the D-Link DIR-816A2 router’s microprogramming software is related to the incorrect use of standard permissions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created HTTP POST request...
The vulnerability of the Windows Secure Kernel Mode mechanism in the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows Secure Kernel Mode mechanism in the Windows operating system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Agile Integration Services component of the Oracle Agile PLM Framework’s product lifecycle management software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Agile Integration Services component of the Oracle Agile PLM Framework management software lifecycle management system is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability allows an attacker to influence the...
Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server: Optimizer component of the MySQL database management system is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability may allow an attacker to cause service interruptions remotely...
The vulnerability of the backup file loading function of the CMSimple system allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.
The vulnerability of the backup file loading function of the CMSimple content management system is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...
The vulnerability of the Apache Hive database, related to the improper assignment of permissions for critical resources, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Hive database is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2025-23367 Org.wildfly.core:wildfly-server: wildfly improper rbac permission
A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...
CVE-2021-3978 Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki
When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...
The vulnerability of the IBM Sterling Secure Proxy proxy server arises from the improper assignment of permissions for the critical resource. This allows a malicious actor to gain unauthorized access to read, modify, or delete data.
The vulnerability of the IBM Sterling Secure Proxy proxy server is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data...