Lucene search
+L

769 matches found

OSV
OSV
added 2025/04/30 1:15 p.m.11 views

CVE-2025-3394

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

7.8CVSS5.8AI score0.00145EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/30 12:40 p.m.10 views

CVE-2025-3395

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.4CVSS7AI score0.00095EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/30 12:40 p.m.30 views

CVE-2025-3395

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.4CVSS0.00095EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/30 12:34 p.m.11 views

CVE-2025-3394 Vulnerability in user management of Automation Builder

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.5CVSS7.7AI score0.00145EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/30 12:34 p.m.36 views

CVE-2025-3394 Vulnerability in user management of Automation Builder

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.5CVSS0.00145EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/30 12:34 p.m.64 views

CVE-2025-3394

The CVE-2025-3394 entry affects ABB’s Automation Builder up to version 2.8.0 . The issue is described as an Incorrect Permission Assignment for a Critical Resource in the user management component, enabling modification of project/user data and overruling of user management. The vulnerability is ...

8.5CVSS7.7AI score0.00145EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/30 12:00 a.m.12 views

PT-2025-18269 · Abb · Abb Automation Builder

Name of the Vulnerable Software and Affected Versions: ABB Automation Builder versions through 2.8.0 Description: The issue affects ABB Automation Builder due to an Incorrect Permission Assignment for Critical Resource and Cleartext Storage of Sensitive Information. This allows unauthorized acces...

8.4CVSS6AI score0.00095EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/04/30 12:00 a.m.14 views

PT-2025-18268 · Abb · Abb Automation Builder

Name of the Vulnerable Software and Affected Versions: ABB Automation Builder versions prior to 2.8.0 Description: The issue is related to an incorrect permission assignment for critical resources in ABB Automation Builder. Recommendations: For versions prior to 2.8.0, update to version 2.8.0 or...

8.5CVSS6.3AI score0.00145EPSS
SaveExploits0References10
Zero Day Initiative
Zero Day Initiative
added 2025/04/30 12:00 a.m.14 views

GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The...

7CVSS7.3AI score0.00125EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/04/16 10:12 p.m.37 views

CVE-2025-0758 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource

Overview The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. CWE-732 Description Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed...

6.1CVSS0.00145EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/16 10:12 p.m.82 views

CVE-2025-0758

CVE-2025-0758 affects Hitachi Vantara Pentaho Business Analytics Server. The root cause is that Karaf JMX beans are enabled and accessible by default, allowing a local-privilege user to leverage exposed functionality via these beans. Impact described across sources: read/modify a security-critica...

6.1CVSS6.2AI score0.00145EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/27 5:11 a.m.12 views

CVE-2024-10209

An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B APROL 4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user...

8.5CVSS6.6AI score0.00132EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 2:34 a.m.31 views

Security Bulletin: IBM Robotic Process Automation is vulnerable to incorrect permission assignment

Summary IBM Robotic Process Automation is vulnerable to incorrect permission assignment which could allow access to application configurations. Vulnerability Details CVEID:CVE-2022-43574 DESCRIPTION: IBM Robotic Process Automation is vulnerable to incorrect permission assignment which could allow...

7.5CVSS7.3AI score0.00473EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/25 5:15 a.m.24 views

CVE-2024-10209

An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL 4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user...

8.5CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/25 4:46 a.m.18 views

CVE-2024-10209 Incorrect Permission Assignment in APROL file system

An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL 4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user...

8.5CVSS0.00132EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/13 12:00 a.m.13 views

Siemens SCALANCE X-200RNA Switch Devices Incorrect Permission Assignment for Critical Resource (CVE-2017-15906)

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

5.3CVSS6.3AI score0.03359EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/02/25 12:00 a.m.10 views

openSUSE Security Advisory (SUSE-SU-2024:2790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.2AI score0.00977EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/12 10:15 p.m.40 views

CVE-2024-39286

Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access...

3.3CVSS0.00233EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:59 p.m.10 views

CVE-2022-1316

Incorrect Permission Assignment for Critical Resource in GitHub repository zerotier/zerotierone prior to 1.8.8. Local Privilege Escalation...

8.8CVSS7.5AI score0.00392EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:01 a.m.23 views

CVE-2024-3375

Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Dialogue: from v1.83 before v1.83.1 or v1.84...

9.4CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Rows per page
Query Builder