Lucene search
+L

769 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 2:28 a.m.13 views

CVE-2024-42022

An incorrect permission assignment vulnerability allows an attacker to modify product configuration files...

7.5CVSS6.8AI score0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/03 12:00 a.m.11 views

WordPress plugin Admin and Site Enhancements Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS9AI score0.00428EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/02/03 12:00 a.m.8 views

NoMachine Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The...

6.7CVSS7.3AI score0.00903EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/28 9:15 p.m.13 views

CVE-2025-24481

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration...

7CVSS0.0016EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/28 8:55 p.m.20 views

CVE-2025-24481 FactoryTalk® View Site Edition - Incorrect Permission Assignment

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration...

7CVSS0.0016EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/16 12:00 a.m.25 views

WordPress plugin DD Roles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.8CVSS8.2AI score0.00554EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.7 views

WordPress plugin Accessibility by AllAccessible 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS8.1AI score0.00406EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/06 5:15 p.m.16 views

CVE-2024-47475

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service...

5.5CVSS0.00128EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/06 5:15 p.m.6 views

CVE-2024-47475

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/06 5:08 p.m.22 views

CVE-2024-47475

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service...

5CVSS0.00128EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/06 5:08 p.m.57 views

CVE-2024-47475

CVE-2024-47475 affects Dell PowerScale OneFS 8.2.2.x through 9.8.0.x due to an incorrect permission assignment for a critical resource. A locally authenticated attacker could exploit this to cause a denial of service. Public sources consistently describe the issue as a local-privilege/vulnerabili...

5.5CVSS6.9AI score0.00128EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/06 5:08 p.m.13 views

CVE-2024-47475

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service...

5CVSS6.7AI score0.00128EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.15 views

The vulnerability of the I-O Data Device UD-LT1 and UD-LT1/EX router microprogramming software lies in the improper assignment of permissions for critical resources, allowing a perpetrator to gain unauthorized access to protected information.

The vulnerability of the I-O Data Device UD-LT1 and UD-LT1/EX router microprogramming software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS7.1AI score0.00483EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.10 views

WordPress plugin SV100 Companion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.7AI score0.00434EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.4 views

WordPress plugin CE21 Suite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.5AI score0.00621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:00 a.m.14 views

G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling o...

7CVSS7.2AI score0.00223EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/12/10 8:56 a.m.13 views

CVE-2024-8256 Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 excluding and TSWOS devices running on versions 1.0 to 1.3 excluding, due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources v...

5.9CVSS7.1AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/05 10:31 a.m.17 views

CVE-2024-45841

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained...

6.5CVSS0.00483EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/05 9:39 a.m.75 views

CVE-2024-45841

CVE-2024-45841 affects I-O DATA UD-LT1 and UD-LT1/EX routers. The issue is an incorrect permission assignment for a critical resource (CWE-732) that lets a user with a guest account read sensitive files, including credentials. JVN/CVE records and vendor notices confirm this vulnerability and indi...

6.5CVSS6.4AI score0.00483EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/05 9:39 a.m.36 views

CVE-2024-45841

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained...

6.5CVSS0.00483EPSS
SaveExploits0References2
Rows per page
Query Builder