CVE-2026-110452: Incorrect Ownership Assignment

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...

ksmbd DoS

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to incorrect ownership assignment. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Incorrect Ownership Assignment

Overview Affected versions of this package are vulnerable to Incorrect Ownership Assignment in the ALTER TABLE ALTER TYPE process. An attacker can gain unauthorized ability to execute DROP STATISTICS and ALTER STATISTICS on affected objects by exploiting improper reassignment of ownership...

CVE-2026-6970 authd Denial of Service and Local Privilege Escalation

authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID GID differs from their UID, either because the account was created with authd prior to version 0.5.4 or because the primary group was...

Incorrect Ownership Assignment

Overview Affected versions of this package are vulnerable to Incorrect Ownership Assignment through improper validation of the defaultGroup ID after group access revocation. An attacker can gain unauthorized access to group collections and perform full CRUD operations by omitting the X-Tenant...

CVE-2025-14262: Incorrect Ownership Assignment

A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other users as if there were saved by the job owner. The attacker must have permissions to access the jobs but then they were saved into the catalog service using the wrong owner...

EUVD-2017-9412

Malware in sbrugna...

EUVD-2019-3175

Malware in sbrugna...

EUVD-2013-1130

Malware in sbrugna...

PT-2025-13019

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.4.1 Splunk Enterprise versions prior to 9.3.3 Splunk Enterprise versions prior to 9.2.5 Splunk Enterprise versions prior to 9.1.8 Splunk Secure Gateway app on Splunk Cloud Platform versions prior to 3.8.38...

CVE-2024-45426

Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access...

CVE-2024-45426

CVE-2024-45426 : Affected product is Zoom Workplace Apps. The root cause is an incorrect ownership assignment that can permit a privileged user to disclose information over the network. Reported impact is solely on confidentiality (high), with no integrity/availability effects per the sources. Th...

CVE-2024-45426 Zoom Workplace Apps - Incorrect Ownership Assignment

Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access...

CVE-2023-29122: Incorrect Ownership Assignment

Under certain conditions, access to service libraries is granted to account they should not have access to...

PT-2025-7909

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps affected versions not specified Description The issue is related to incorrect ownership assignment in some Zoom Workplace Apps, which may allow a privileged user to conduct an information disclosure via network access...

CVE-2023-4008: Incorrect Ownership Assignment

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to takeover GitLab Pages with unique domain URLs if the random string added was known...

CVE-2022-33737: Incorrect Ownership Assignment

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

PT-2022-5203

Name of the Vulnerable Software and Affected Versions Juniper Networks Contrail Service Orchestration versions 6.0.0 through 6.0.0 Patch v2 Description The issue is related to an Incorrect Ownership Assignment vulnerability in the Juniper Networks Contrail Service Orchestration interface. This...

CVE-2021-26248: Incorrect Ownership Assignment

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2021-32726: Incorrect Ownership Assignment

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reused an earlier used username, the previous user could gain access to their account. The issue was fix...