1258 matches found
CVE-2025-54546: Incorrect Permission Assignment for Critical Resource
On affected platforms, restricted users could use SSH port forwarding to access host-internal services...
CVE-2025-62688
CVE-2025-62688 concerns Productivity Suite software v4.4.1.19, where an incorrect permission assignment for a critical resource enables a user with low-privileged credentials to change their role and gain full control access to the project. The Red Hat, NVD, and other feeds corroborate the same d...
PT-2025-43573
Name of the Vulnerable Software and Affected Versions Productivity Suite version 4.4.1.19 Description An incorrect permission assignment for a critical resource exists in the software. This allows an attacker with low-privileged credentials to change their role, gaining full control access to the...
CVE-2025-62688: Incorrect Permission Assignment for Critical Resource
An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...
AutomationDirect Productivity Suite 安全漏洞
AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which stems from an improper assignment of critical resource permissions and could allow...
CVE-2025-12004: Incorrect Permission Assignment for Critical Resource
Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42...
Incorrect Permission Assignment for Critical Resource
Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the Menu Display Widget process. An attacker can access sensitive information by viewing content that should be restricted to authorized users. Remediation Upgrade...
CVE-2025-62251: Incorrect Permission Assignment for Critical Resource
Liferay Portal 7.3.0 through 7.4.3.119, and Liferay DXP 2023.Q3.1 through 2023.Q3.8, 2023.Q4.0 through 2023.Q4.5, 7.4 GA through update 92 and 7.3 GA though update 36 shows content to users who do not have permission to view it via the Menu Display Widget. This security flaw could result in...
CVE-2025-8886
CVE-2025-8886 affects Aybs Interaktif ERP by Usta Information Systems. The issue is described as Incorrect Permission Assignment for Critical Resource, exposure of sensitive information to unauthorized actors, Missing Authorization, and Incorrect Authorization, enabling privilege abuse and authen...
EUVD-2018-3665
Malware in sbrugna...
EUVD-2017-4252
Malware in sbrugna...
EUVD-2020-18192
Malware in sbrugna...
EUVD-2021-22900
Malware in sbrugna...
EUVD-2021-19318
Malware in sbrugna...
EUVD-2020-28941
Malware in sbrugna...
EUVD-2021-15314
Malware in sbrugna...
EUVD-2024-46800
Malicious code in bioql PyPI...
EUVD-2025-12731
Malicious code in bioql PyPI...