CVE-2025-24481 FactoryTalk® View Site Edition - Incorrect Permission Assignment

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration...

Malicious code in home-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243807d7ae6247f1bee104dab17a677c3ec10064973a5ac7b3e5f4ff2753d35a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-596 Malicious code in home-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243807d7ae6247f1bee104dab17a677c3ec10064973a5ac7b3e5f4ff2753d35a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rockwell Automation FactoryTalk View SE 安全漏洞

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation, Inc. A security vulnerability exists in Rockwell Automation FactoryTalk View SE that stems from a privilege assignment error...

CVE-2025-24481: Incorrect Permission Assignment for Critical Resource

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration...

CVE-2025-0543 G DATA Security Client Local privilege escalation

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

CVE-2024-52328: Incorrect Permission Assignment for Critical Resource

ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on...

Boost library Heap Buffer Overflow DoS

The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...

PT-2025-2915

The issue affects Homey Login Register, with versions from n/a through 2.4.0, due to an Incorrect Privilege Assignment, allowing Privilege Escalation. An exploit for this issue is available, but details on how it is exploited are not provided here to avoid duplication. The affected software is...

CVE-2025-21523: Incorrect Permission Assignment for Critical Resource

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2025-21564: Incorrect Permission Assignment for Critical Resource

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain component: Agile Integration Services. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

CVE-2025-21571: Incorrect Permission Assignment for Critical Resource

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.24 and prior to 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2025-21551: Incorrect Permission Assignment for Critical Resource

Vulnerability in the Oracle Solaris product of Oracle Systems component: File system. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2024-51888: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in favethemes Homey Login Register homey-login-register allows Privilege Escalation.This issue affects Homey Login Register: from n/a through = 2.4.0...

CVE-2024-38337: Incorrect Permission Assignment for Critical Resource

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due to incorrect permission assignments...

CVE-2025-23528

Incorrect Privilege Assignment vulnerability in Mosterd3d DD Roles dd-roles allows Privilege Escalation.This issue affects DD Roles: from n/a through = 4.1...

CVE-2025-23528

CVE-2025-23528 describes an Incorrect Privilege Assignment in the WordPress plugin DD Roles (by Wouter Dijkstra) that enables authenticated privilege escalation. Affected: DD Roles up to version 4.1. The vulnerability is rated with CVSS 3.1/3.1: Base score 8.8 (High), vectors: AV:N/AC:L/PR:L/UI:N...

WordPress plugin DD Roles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

Fortinet多款产品 安全漏洞

Fortinet FortiManager and others are products of Fortinet, Inc.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiAnalyzer is a centralized network security reporting solution.Fortinet Fortinet FortiAnalyzer Cloud is a cloud-based logging platform based on...

PT-2025-4922 · Dd Roles · Dd Roles

Name of the Vulnerable Software and Affected Versions: DD Roles versions n/a through 4.1 Description: The issue is related to an incorrect privilege assignment, allowing privilege escalation. This problem affects the mentioned versions of DD Roles. Recommendations: For versions n/a through 4.1,...