EUVD-2025-18129

Malicious code in bioql PyPI...

Security Bulletin: IBM Event Processing is vulnerable due to Incorrect Default Permissions (CVE-2025-30706)

Summary IBM Event Processing is vulnerable due to incorrect default permissions in the MySQL Connectors product specifically, Connector/J. This connector is used in IBM Event Processing to enable Java-based components to interact with MySQL databases for storing and retrieving event-related data...

ROS-20250924-05

The Kea open source DHCP server vulnerability is related to input validation errors in the file path processing. Exploitation of the vulnerability could allow an attacker to escalate privileges on the system Kea open source DHCP server vulnerability is related to incorrect default permissions for...

The vulnerability of the software for secure data collection regarding the status of Tenable Agent, due to incorrect default permissions, allows a perpetrator to execute arbitrary code.

The vulnerability of the software used for securely collecting status data about Tenable Agent is related to incorrect default permissions. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43887

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-43887

CVE-2025-43887 affects Dell PowerProtect Data Manager running on Hyper‑V (versions 19.19 and 19.20). The root cause is an Incorrect Default Permissions issue which enables a local, low-privileged attacker to perform Elevation of Privilege. Several connected sources corroborate the affected produc...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2025-43725

Dell PowerProtect Data Manager, Generic Application Agent, versions 19.19 and 19.20, contains an Incorrect Default Permissions vulnerability. The root cause is misconfigured permissions that a low-privileged local attacker could abuse to execute code. Impact is consistent with a local, high-privi...

CVE-2025-10231 N-central Incorrect Default Permissions could lead to Privilege Escalation

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

CVE-2025-10231

CVE-2025-10231 affects the N-able N-central Windows Agent and Probe. The issue is an incorrect file handling permission that, under certain conditions, could allow a local low-privilege user to execute commands with elevated permissions (privilege escalation). Public sources in the connected docu...

PT-2025-37070

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20 Description: Dell PowerProtect Data Manager, running on Hyper-V, contains an Incorrect Default Permissions issue. A low-privileged attacker with local access could potentially exploit th...

PT-2025-37066

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager, Generic Application Agent versions 19.19 and 19.20 Description: Dell PowerProtect Data Manager, Generic Application Agent contains an Incorrect Default Permissions issue. A low privileged attacker with local...

CVE-2024-43166

Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...