The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller, related to the improper assignment of permissions for critical resources, allows a intruder to execute arbitrary code.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

Vulnerable-Docker-Engine

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

CentOS Linux 6 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776346717)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776346717 advisory. - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation...

PT-2026-97536

Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension versions prior to 1.47.0 Description Improper handling of insufficient permissions or privileges allows accessing functionality not properly constrained by Access Control Lists ACLs, which are sets of rules tha...

ROS-20260922-73-0128

The vulnerability in golang-x-crypto is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260921-73-0116

The vulnerability of the NewKeyring function in the Go programming language is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

CVE-2026-54471

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers allows a hacker to escalate their privileges and execute arbitrary code. This vulnerability is present in programs like cPanel & WHM, Plesk.

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers is related to improperly used standard permissions. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...

CVE-2026-1759

An improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows privilege escalation . The affected versions are 11.5 and 11.4.625515072 . The issue is fixed in version 11.6 or 11.4.626194074 and above. The CVSS 3.1 score is 6.5 (Medium) with a network a...

ROS-20260911-73-0167

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

EUVD-2026-75753

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

CVE-2026-11813

CVE-2026-11813 affects the Lenovo Filez Client application. An improper permissions flaw allows a local authenticated user to escalate privileges, with high impact on confidentiality, integrity, and availability. The CNA (Lenovo) rates it CVSS 3.1: 7.8 (HIGH) and CVSS 4.0: 8.5 (HIGH) , both with ...

PT-2026-89593

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...

CVE-2026-86493

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper (CVE-2025-58457)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable due to improper permission check vulnerability in Zookeeper Vulnerability Details CVEID:CVE-2025-58457 DESCRIPTION: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and resto...

JetBrains TeamCity < 2020.2.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2020.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user. CVE-2021-25774 - In JetBrains TeamCity before...