CVE-2025-14604

IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors...

CVE-2025-14604

IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors...

CVE-2025-14604

IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors...

EUVD-2017-10640

Malware in sbrugna...

EUVD-2025-21093

Malicious code in bioql PyPI...

CVE-2024-28023

A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code...

CVE-2024-28023

The CVE-2024-28023 entry concerns a vulnerability in the message queueing mechanism used by Hitachi Energy FOXMAN-UN / UNEM (Hitachi FOXMAN-UN server and related APIGateway components). Connected documents corroborate a risk that exploitation could lead to exposure of resources or functionality t...

CVE-2022-33163: Incorrect Permission Assignment for Critical Resource

IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 228571...

Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)

Exploit Title: Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root Telnet/SSH Date: 21.09.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.cypress.bc.ca !/usr/bin/env python3 Cypress Solutions CTM-200/CTM-ONE Hard-coded Credentials Remote Root Telnet/SSH Vendor:...

CVE-2021-27904: Undefined Security Weakness

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...

CVE-2019-4702: Incorrect Permission Assignment for Critical Resource

IBM Security Guardium Data Encryption GDE 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors...

Code injection

IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350...

CVE-2018-2024: Incorrect Permission Assignment for Critical Resource

IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350...

CVE-2019-4158

IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574...

CVE-2019-4158

IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574...

CVE-2019-4158: Missing Authorization

IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574...

CVE-2018-8848

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor...

CVE-2017-1396: Undefined Security Weakness

IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 127342...

Code injection

Bitcoin Core before v0.13.0 allows denial of service memory exhaustion triggered by the remote network alert system deprecated since Q1 2016 if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects othe...

CVE-2016-10724

Bitcoin Core before v0.13.0 allows denial of service memory exhaustion triggered by the remote network alert system deprecated since Q1 2016 if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects othe...