Lucene search
K

393 matches found

Snyk
Snyk
added 2026/06/10 10:15 p.m.4 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource through improper handling of caveat structures containing nested lists in the caching process. An attacker can gain unauthorized access to protected resources by crafting requests th...

3.1CVSS5.3AI score0.00276EPSS
Exploits0References2
Snyk
Snyk
added 2026/06/10 10:15 p.m.3 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource through improper handling of caveat structures containing nested lists in the caching process. An attacker can gain unauthorized access to protected resources by crafting requests th...

3.1CVSS5.3AI score0.00276EPSS
Exploits0References2
Snyk
Snyk
added 2026/06/10 10:15 p.m.2 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource through improper handling of caveat structures containing nested lists in the caching process. An attacker can gain unauthorized access to protected resources by crafting requests th...

3.1CVSS5.3AI score0.00276EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/06/05 7:47 p.m.7 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS5.4AI score0.00096EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/29 12:9 p.m.12 views

CVE-2026-9508 Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar

Incorrect permission settings on a critical resource in Suprema BioStar 2 versions 2.9.3 through 2.9.11 that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webroot. This vulnerability allows an attacker with network access to directly...

10CVSS5.8AI score0.00341EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.12 views

PT-2026-44742

Name of the Vulnerable Software and Affected Versions ASUS System Control Interface affected versions not specified Description An incorrect permission assignment for critical resources in the ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary...

7.3CVSS6AI score0.00097EPSS
Exploits0References4
OSV
OSV
added 2026/05/26 6:16 p.m.6 views

UBUNTU-CVE-2025-33221

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

6CVSS5.8AI score0.00175EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/26 5:26 p.m.5 views

CVE-2025-33221

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

4.4CVSS5.8AI score0.00175EPSS
Exploits0References4Affected Software3
Vulnrichment
Vulnrichment
added 2026/05/26 5:26 p.m.5 views

CVE-2025-33221

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

4.4CVSS5.8AI score0.00175EPSS
Exploits0References3
CVE
CVE
added 2026/05/26 5:26 p.m.31 views

CVE-2025-33221

CVE-2025-33221 affects NVIDIA GPU Display Driver for Windows and Linux. The kernel-driver vulnerability could cause incorrect permission assignments for a critical resource, with possible data tampering and denial of service. The available connected security updates indicate CVE-2025-33221 is add...

6CVSS5.8AI score0.00175EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2026/05/04 2:16 p.m.9 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS0.00096EPSS
Exploits0References1
CVE
CVE
added 2026/05/04 2:8 p.m.10 views

CVE-2026-6499

CVE-2026-6499 affects OpenConcerto 1.7.5. The issue is described as an Incorrect Permission Assignment for Critical Resource vulnerability that could allow Replace Binaries. CVSS v4.0 metrics: AV:L, AC:L, PR:L, UI:P, S:U, C:N/I:N/A:N with VU: none/low; base score 2.4 (LOW). Exploitation status is...

2.4CVSS5.8AI score0.00096EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/04 2:8 p.m.26 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS0.00096EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/04 2:8 p.m.5 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS5.8AI score0.00096EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/04 2:8 p.m.3 views

CVE-2026-6499

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS5.8AI score0.00096EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/05/04 2:8 p.m.4 views

EUVD-2026-26969

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...

2.4CVSS5.8AI score0.00096EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.3 views

PT-2026-36807

Name of the Vulnerable Software and Affected Versions OpenConcerto version 1.7.5 Description Incorrect permission assignment for a critical resource allows the replacement of binaries. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

2.4CVSS5.8AI score0.00096EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/16 2:0 a.m.25 views

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows t...

5.4CVSS0.00139EPSS
Exploits1References1
NVD
NVD
added 2026/04/08 12:16 p.m.4 views

CVE-2026-28264

Dell PowerProtect Agent Service, versions prior to 20.1, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

5.5CVSS0.0013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 11:24 a.m.5 views

CVE-2026-28264

Dell PowerProtect Agent Service, versions prior to 20.1, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

3.3CVSS5.9AI score0.0013EPSS
Exploits0References1
Rows per page
Query Builder