5896 matches found
The vulnerability of the Suricata intrusion detection and prevention system’s entropy component allows a intruder to trigger a service failure.
The vulnerability of the Suricata intrusion detection and prevention system’s entropy component is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to trigger a service failure...
The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to trigger a service failure.
The vulnerability of the NVIDIA GPU Display Driver software driver is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2025-48210
Name of the Vulnerable Software and Affected Versions VIPRE Advanced Security for PC affected versions not specified Description A local attacker can gain higher-level access on systems running VIPRE Advanced Security for PC. To exploit this, an attacker must first be able to run code with limite...
CVE-2025-45311: Incorrect Privilege Assignment
Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...
GO-2025-4153 Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana
Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners,...
Linux Distros Unpatched Vulnerability : CVE-2025-62401
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an...
ROS-20251125-06
A vulnerability in the Moodle virtual learning environment is related to the disclosure of hidden group names to users, who have permission to create events in the calendar. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain unauthorized access to protected...
The vulnerability of the SCIM implementation in the Grafana monitoring and observation platform allows a perpetrator to gain unauthorized access to the platform.
The vulnerability of the SCIM implementation in the Grafana monitoring and observation platform is related to deficiencies in the privilege assignment mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the platform...
SOPlanning 安全漏洞
SOPlanning is a suite of online project management software from SOPlanning, Inc. A security vulnerability exists in SOPlanning versions prior to 1.55 that stems from an improper assignment of privileges in the User Management tab, which could result in elevated privileges...
CVE-2025-64996: Incorrect Permission Assignment for Critical Resource
In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mkinotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification ...
GO-2025-4125 Observability Operator is vulnerable to Incorrect Privilege Assignment through its Custom Resource MonitorStack in github.com/rhobs/observability-operator
Observability Operator is vulnerable to Incorrect Privilege Assignment through its Custom Resource MonitorStack in github.com/rhobs/observability-operator...
CVE-2025-64307
The Brightpick Internal Logic Control web interface is accessible without requiring user authentication. An unauthorized user could exploit this interface to manipulate robot control functions, including initiating or halting runners, assigning jobs, clearing stations, and deploying storage totes...
The vulnerability of the Spectrum Power 4 software, related to incorrect privilege assignment, allows a perpetrator to elevate their privileges.
The vulnerability of the Spectrum Power 4 software is related to incorrect privilege assignment. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Vulnerability of the __iwl_mvm_remove_time_event() function in the drivers/net/wireless/intel/iwlwifi/mvm/time-event.c module – The driver for supporting Intel wireless connection adapters in the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the iwlmvmremovetimeevent function in the drivers/net/wireless/intel/iwlwifi/mvm/time-event.c file of the Intel wireless driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the mxsfb_irqdisable() function in the drivers/gpu/drm/mxsfb/mxsfb_drv.c driver module allows a attacker to cause a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI) kernel module.
The vulnerability of the mxsfbirqdisable function in the drivers/gpu/drm/mxsfb/mxsfbdrv.c driver module relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of AnyDesk’s remote access and management software, related to pointer swapping errors, allows a hacker to trigger a service failure.
The vulnerability of AnyDesk remote access and management software is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2025-6325
Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through = 51.1.36...
CVE-2025-60195
Incorrect Privilege Assignment vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Privilege Escalation.This issue affects Atarim: from n/a through = 4.2.1...
CVE-2025-60243
Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerce selling-commander-connector allows Privilege Escalation.This issue affects Selling Commander for WooCommerce: from n/a through = 1.2.46...