Lucene search
K

742 matches found

Positive Technologies
Positive Technologies
•added 2026/05/29 12:0 a.m.•8 views

PT-2026-44742

Name of the Vulnerable Software and Affected Versions ASUS System Control Interface affected versions not specified Description An incorrect permission assignment for critical resources in the ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary...

7.3CVSS6AI score0.00014EPSS
Exploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/13 12:0 a.m.•8 views

PT-2026-40649

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.1.3.1 F5 BIG-IP versions prior to 17.5.1.4 F5 BIG-IP versions prior to 21.0.0.1 Description Incorrect permission assignment issues exist in iControl REST and an undisclosed command within the TMOS shell tmsh. The...

7.1CVSS5.8AI score0.00063EPSS
Exploits0References4
Cvelist
Cvelist
•added 2026/05/04 2:8 p.m.•24 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS0.00017EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
•added 2026/05/04 2:8 p.m.•3 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS5.8AI score0.00017EPSS
Exploits0References2Affected Software1
CVE
CVE
•added 2026/04/08 11:24 a.m.•7 views

CVE-2026-28264

Dell PowerProtect Agent Service (versions prior to 20.1) is affected by an Incorrect Permission Assignment for Critical Resource vulnerability. A low-privileged attacker with local access could trigger information exposure. Affected component: Dell PowerProtect Agent Service. Root cause: incorrec...

5.5CVSS5.9AI score0.00005EPSS
Exploits0References1Affected Software1
EUVD
EUVD
•added 2026/04/08 11:24 a.m.•1 views

EUVD-2026-20449

Dell PowerProtect Agent Service, versions prior to 20.1, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

3.3CVSS5.9AI score0.00005EPSS
Exploits0References1
EUVD
EUVD
•added 2026/04/01 3:31 p.m.•0 views

EUVD-2026-17873

Dell AppSync, versions 4.6.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.9AI score0.00005EPSS
Exploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/01 12:18 p.m.•1 views

CVE-2026-22768

Dell AppSync, versions 4.6.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.9AI score0.00005EPSS
Exploits0References1
CVE
CVE
•added 2026/04/01 12:18 p.m.•5 views

CVE-2026-22768

Dell AppSync, version 4.6.0, contains an Incorrect Permission Assignment for a Critical Resource vulnerability. A low-privileged attacker with local access could exploit this to achieve Elevation of Privileges. CVSS v3.1 indicates Local attack vector, Low attack complexity, Privileges Required: L...

7.3CVSS5.9AI score0.00005EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/01 12:0 a.m.•0 views

PT-2026-29513

Dell AppSync, versions 4.6.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.9AI score0.00005EPSS
Exploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 3:0 p.m.•3 views

CVE-2026-24291

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00044EPSS
Exploits3References1
NVD
NVD
•added 2026/03/12 3:15 a.m.•5 views

CVE-2025-15037

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

6.8CVSS0.00023EPSS
Exploits0References1
EUVD
EUVD
•added 2026/03/12 2:0 a.m.•3 views

EUVD-2025-208607

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

6.8CVSS5.8AI score0.00023EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
•added 2026/03/12 2:0 a.m.•2 views

CVE-2025-15037

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

6.8CVSS5.8AI score0.00023EPSS
Exploits0References2
Cvelist
Cvelist
•added 2026/03/12 2:0 a.m.•20 views

CVE-2025-15037

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

6.8CVSS0.00023EPSS
Exploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/12 12:0 a.m.•2 views

PT-2026-24909

🚨 CVE-2025-15037 An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive...

6.8CVSS5.8AI score0.00023EPSS
Exploits0References7
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•2 views

EUVD-2026-10486

Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affects Visionline: from 1.0 before 1.33...

5.8CVSS5.8AI score0.00016EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
•added 2026/03/10 5:4 p.m.•4 views

CVE-2026-24291

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00044EPSS
Exploits3References2Affected Software21
OSV
OSV
•added 2026/02/20 5:25 p.m.•1 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References1
OSV
OSV
•added 2026/02/20 5:25 p.m.•2 views

CVE-2026-26100

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References1
Rows per page
Query Builder