5919 matches found
ROS-20250828-06
A vulnerability in the Verify component of the Go programming language is related to incorrect assignment of permissions for a critical resource. a critical resource. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions. existing security...
CVE-2025-43729
Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...
CVE-2025-43729
Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...
CVE-2025-43729
Dell ThinOS 10 is affected by an Elevation of Privileges vulnerability due to Incorrect Permission Assignment for a Critical Resource. Affected versions are prior to 2508_10.0127. Local, low-privilege attackers could exploit this to gain unauthorized access. The issue is mitigated by upgrading De...
DELL iDRAC Service Module Code Execution Vulnerability
The DELL iDRAC Service Module is a lightweight software service on Dell servers that is primarily used to enhance the functionality of iDRAC Integrated Dell Remote Control Card and improve server management efficiency by consolidating operating system information. A code execution vulnerability...
CVE-2025-30063: Incorrect Permission Assignment for Critical Resource
The configuration file containing database logins and passwords is readable by any local user...
CVE-2025-43729: Incorrect Permission Assignment for Critical Resource
Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...
PT-2025-34867
Name of the Vulnerable Software and Affected Versions: Dell ThinOS versions prior to 2508 10.0127 Description: Dell ThinOS 10 contains an Incorrect Permission Assignment for Critical Resource. A local low-privileged attacker could potentially exploit this issue, leading to Elevation of Privileges...
ROS-20250826-05
A vulnerability in the DBI module of the Perl DBI database interface is related to improper assignment of permissions to a a critical resource. Exploitation of the vulnerability allows an attacker to gain access to sensitive data, as well as cause a denial of service...
Incorrect Permission Assignment for Critical Resource
Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via storeAddContentPortletPreferences. An attacker can enumerate all tenants of a virtual instance by adding pages outside the default or main virtual instance and creating a list of...
CVE-2025-54735
Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through = 1.1.24...
CVE-2025-48165
Incorrect Privilege Assignment vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Privilege Escalation.This issue affects DELUCKS SEO: from n/a through = 2.6.0...
CVE-2025-48142
Incorrect Privilege Assignment vulnerability in Saad Iqbal Bookify bookify allows Privilege Escalation.This issue affects Bookify: from n/a through = 1.0.9...
CVE-2025-48164
Incorrect Privilege Assignment vulnerability in Brainstorm Force SureDash suredash allows Privilege Escalation.This issue affects SureDash: from n/a through = 1.0.3...
CVE-2025-53580
Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...
CVE-2025-43759: Incorrect Permission Assignment for Critical Resource
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows admin users of a virtual instance to add pages that are not in the...
CVE-2025-38742
Dell iDRAC Service Module iSM, versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-38742
Dell iDRAC Service Module (iSM) versions prior to 6.0.3.0 contain an Incorrect Permission Assignment for Critical Resource vulnerability that could allow a low-privileged, local attacker to achieve code execution. Public sources in the connected documents consistently tie this CVE (CVE-2025-38742...
CVE-2025-38742
Dell iDRAC Service Module iSM, versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...