Lucene search
+L

1248 matches found

Snyk
Snyk
•added 2025/09/17 8:42 p.m.•9 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

5.1CVSS6.6AI score0.00116EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/17 8:42 p.m.•8 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

5.1CVSS6.6AI score0.00116EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/17 8:42 p.m.•7 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

5.1CVSS6.6AI score0.00116EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/17 8:42 p.m.•11 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

5.1CVSS6.6AI score0.00116EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/17 8:42 p.m.•10 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

5.1CVSS6.6AI score0.00116EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/17 8:42 p.m.•5 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

5.1CVSS6.6AI score0.00116EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/17 8:41 p.m.•5 views

CVE-2025-10644 Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS9.7AI score0.02996EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•6 views

CVE-2025-59349: Incorrect Permission Assignment for Critical Resource

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses the os.MkdirAll function to create certain directory paths with specific access permissions. This function does not perform any permission checks when a given directory path...

5.1CVSS5.9AI score0.00116EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•2 views

CVE-2025-0164: Incorrect Permission Assignment for Critical Resource

IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper permission assignment...

2.3CVSS5.8AI score0.00123EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/12 11:18 a.m.•11 views

Security Bulletin: IBM QRadar SIEM is affected by by improper permission assignment (CVE-2025-0164)

Summary IBM QRadar SIEM is affected by improper permission assignment. Local privileged users may perform unauthorized actions on configuration files. IBM QRadar SIEM has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-0164 DESCRIPTION: IBM QRadar SIEM could allow a local...

2.3CVSS6.2AI score0.00123EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•3 views

CVE-2025-40804: Incorrect Permission Assignment for Critical Resource

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

9.3CVSS5.7AI score0.00399EPSS
SaveExploits0References1
Redos
Redos
•added 2025/08/28 12:00 a.m.•11 views

ROS-20250828-06

A vulnerability in the Verify component of the Go programming language is related to incorrect assignment of permissions for a critical resource. a critical resource. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions. existing security...

8.6CVSS8.8AI score0.00442EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•7 views

CVE-2025-53396: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier Media version:16.0.0a and earlier, which may allow users who can log in to a client terminal to obtain root privileges...

7.3CVSS5.8AI score0.00122EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/27 2:02 p.m.•36 views

CVE-2025-43729

Dell ThinOS 10 is affected by an Elevation of Privileges vulnerability due to Incorrect Permission Assignment for a Critical Resource. Affected versions are prior to 2508_10.0127. Local, low-privilege attackers could exploit this to gain unauthorized access. The issue is mitigated by upgrading De...

7.8CVSS6.4AI score0.0013EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/08/27 2:02 p.m.•22 views

CVE-2025-43729

Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...

7.8CVSS0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/27 2:02 p.m.•5 views

CVE-2025-43729

Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...

7.8CVSS6.4AI score0.0013EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•16 views

PT-2025-34867

Name of the Vulnerable Software and Affected Versions: Dell ThinOS versions prior to 2508 10.0127 Description: Dell ThinOS 10 contains an Incorrect Permission Assignment for Critical Resource. A local low-privileged attacker could potentially exploit this issue, leading to Elevation of Privileges...

7.8CVSS6.1AI score0.0013EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•5 views

CVE-2025-43729: Incorrect Permission Assignment for Critical Resource

Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...

7.8CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•2 views

CVE-2025-30063: Incorrect Permission Assignment for Critical Resource

The configuration file containing database logins and passwords is readable by any local user...

9.4CVSS5.8AI score0.00134EPSS
SaveExploits0References1
Redos
Redos
•added 2025/08/26 12:00 a.m.•18 views

ROS-20250826-05

A vulnerability in the DBI module of the Perl DBI database interface is related to improper assignment of permissions to a a critical resource. Exploitation of the vulnerability allows an attacker to gain access to sensitive data, as well as cause a denial of service...

6.1CVSS7.3AI score0.00488EPSS
SaveExploits1
Rows per page
Query Builder