854 matches found
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller, related to the improper assignment of permissions for critical resources, allows a intruder to execute arbitrary code.
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...
Vulnerable-Docker-Engine
CVE-2021-41091 이 익스플로잇은 CVE-2021-41091 보안 취약점에 대한 심층 분석을 제공하며, 호스트에서 권한 상승을 달성하기 위해 익스플로잇 스크립트를 활용하는 방법에 대한 단계별 가이드를 제공합니다. 취약점 요약 CVE-2021-41091은 MobyDocker Engine의 결함으로, 부적절하게 제한된 권한으로 인해 권한이 없는 Linux 사용자가 데이터 디렉터리일반적으로 /var/lib/docker에 위치를 탐색하고 프로그램을 실행할 수 있습니다. 이 취약점은 컨테이너에 setuid와 같은 확장 권한이 ...
CVE-2026-87660
A vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) due to improper file permissions and missing authorization . An unprivileged local user can exploit this to invoke privileged hardware tests , force system er...
EUVD-2026-94697
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
CVE-2026-87660
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
PT-2026-107803
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
The vulnerabilities of the `extractAllTo()` and `extractEntryTo()` functions in the Node.js library for working with zip files, Adm-zip, allow attackers to escalate their privileges.
The vulnerability of the extractAllTo and extractEntryTo functions in the Node.js library for working with zip files, Adm-zip, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
CentOS Linux 6 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776346717)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776346717 advisory. - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation...
PT-2026-97536
Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension versions prior to 1.47.0 Description Improper handling of insufficient permissions or privileges allows accessing functionality not properly constrained by Access Control Lists ACLs, which are sets of rules tha...
ROS-20260922-73-0128
The vulnerability in golang-x-crypto is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260921-73-0116
The vulnerability of the NewKeyring function in the Go programming language is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
CVE-2026-54471
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers allows a hacker to escalate their privileges and execute arbitrary code. This vulnerability is present in programs like cPanel & WHM, Plesk.
The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers is related to improperly used standard permissions. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...
CVE-2026-1759
An improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows privilege escalation . The affected versions are 11.5 and 11.4.625515072 . The issue is fixed in version 11.6 or 11.4.626194074 and above. The CVSS 3.1 score is 6.5 (Medium) with a network a...
ROS-20260911-73-0167
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...
CVE-2026-11813
CVE-2026-11813 affects the Lenovo Filez Client application. An improper permissions flaw allows a local authenticated user to escalate privileges, with high impact on confidentiality, integrity, and availability. The CNA (Lenovo) rates it CVSS 3.1: 7.8 (HIGH) and CVSS 4.0: 8.5 (HIGH) , both with ...
