Lucene search
K

281 matches found

Cvelist
Cvelist
added 2026/05/04 2:8 p.m.29 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS0.00096EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 11:24 a.m.18 views

CVE-2026-28264

Dell PowerProtect Agent Service (versions prior to 20.1) is affected by an Incorrect Permission Assignment for Critical Resource vulnerability. A low-privileged attacker with local access could trigger information exposure. Affected component: Dell PowerProtect Agent Service. Root cause: incorrec...

5.5CVSS5.9AI score0.0013EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/04/08 11:24 a.m.8 views

EUVD-2026-20449

Dell PowerProtect Agent Service, versions prior to 20.1, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

3.3CVSS5.9AI score0.0013EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/01 3:31 p.m.2 views

EUVD-2026-17873

Dell AppSync, versions 4.6.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.9AI score0.00127EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/01 12:18 p.m.2 views

CVE-2026-22768

Dell AppSync, versions 4.6.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.9AI score0.00127EPSS
Exploits0References1
CVE
CVE
added 2026/04/01 12:18 p.m.11 views

CVE-2026-22768

Dell AppSync, version 4.6.0, contains an Incorrect Permission Assignment for a Critical Resource vulnerability. A low-privileged attacker with local access could exploit this to achieve Elevation of Privileges. CVSS v3.1 indicates Local attack vector, Low attack complexity, Privileges Required: L...

7.3CVSS5.9AI score0.00127EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/03/12 3:15 a.m.10 views

CVE-2025-15037

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

6.8CVSS0.00099EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/12 2:0 a.m.6 views

EUVD-2025-208607

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

6.8CVSS5.8AI score0.00099EPSS
Exploits0References1
OSV
OSV
added 2026/02/20 5:25 p.m.1 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.00096EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/20 4:56 p.m.2 views

CVE-2026-26102

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.4AI score0.00106EPSS
Exploits0References2
CVE
CVE
added 2026/02/20 4:55 p.m.15 views

CVE-2026-26100

CVE-2026-26100 concerns Owl opds, version 2.2.0.4, where incorrect permission assignment of a critical resource enables file manipulation via a crafted network request. The CVE entry documents a MEDIUM-severity issue with CVSS 4.0, scoped as local access, low attack complexity, and no user intera...

6.8CVSS5.4AI score0.00089EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/11 2:47 p.m.4 views

CVE-2025-61969

Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

7CVSS6AI score0.00131EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 7:1 p.m.15 views

CVE-2026-22280

Dell PowerScale OneFS has a vulnerability caused by an incorrect permission assignment for a critical resource. A low-privileged attacker with local access could potentially exploit this to cause denial of service. Affected versions include 9.5.0.0–9.5.1.5, 9.6.0.0–9.7.1.10, 9.8.0.0–9.10.1.3, and...

5.5CVSS5.5AI score0.00116EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/26 12:0 a.m.5 views

PT-2025-48210

Name of the Vulnerable Software and Affected Versions VIPRE Advanced Security for PC affected versions not specified Description A local attacker can gain higher-level access on systems running VIPRE Advanced Security for PC. To exploit this, an attacker must first be able to run code with limite...

7.8CVSS7.6AI score0.00116EPSS
Exploits0References4
OSV
OSV
added 2025/11/04 7:17 p.m.2 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00183EPSS
Exploits0References1
CVE
CVE
added 2025/10/23 9:58 p.m.12 views

CVE-2025-62688

CVE-2025-62688 concerns Productivity Suite software v4.4.1.19, where an incorrect permission assignment for a critical resource enables a user with low-privileged credentials to change their role and gain full control access to the project. The Red Hat, NVD, and other feeds corroborate the same d...

7.1CVSS6.5AI score0.00138EPSS
Exploits0References4
Snyk
Snyk
added 2025/10/14 12:31 a.m.4 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the Menu Display Widget process. An attacker can access sensitive information by viewing content that should be restricted to authorized users. Remediation Upgrade...

6.5CVSS6.5AI score0.00236EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-18192

Malware in sbrugna...

7.8CVSS7.6AI score0.00525EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-15314

Malware in sbrugna...

7.8CVSS7.6AI score0.00508EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-47273

Malicious code in bioql PyPI...

7.8CVSS6.9AI score0.00224EPSS
Exploits0References1
Rows per page
Query Builder