Lucene search
+L

1256 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•8 views

CVE-2025-53396: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier Media version:16.0.0a and earlier, which may allow users who can log in to a client terminal to obtain root privileges...

7.3CVSS5.8AI score0.00122EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/27 2:02 p.m.•38 views

CVE-2025-43729

Dell ThinOS 10 is affected by an Elevation of Privileges vulnerability due to Incorrect Permission Assignment for a Critical Resource. Affected versions are prior to 2508_10.0127. Local, low-privilege attackers could exploit this to gain unauthorized access. The issue is mitigated by upgrading De...

7.8CVSS6.4AI score0.0013EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/27 2:02 p.m.•6 views

CVE-2025-43729

Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...

7.8CVSS6.4AI score0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/27 2:02 p.m.•23 views

CVE-2025-43729

Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...

7.8CVSS0.0013EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•3 views

CVE-2025-30063: Incorrect Permission Assignment for Critical Resource

The configuration file containing database logins and passwords is readable by any local user...

9.4CVSS5.8AI score0.00134EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•6 views

CVE-2025-43729: Incorrect Permission Assignment for Critical Resource

Dell ThinOS 10, versions prior to 250810.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access...

7.8CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•20 views

PT-2025-34867

Name of the Vulnerable Software and Affected Versions: Dell ThinOS versions prior to 2508 10.0127 Description: Dell ThinOS 10 contains an Incorrect Permission Assignment for Critical Resource. A local low-privileged attacker could potentially exploit this issue, leading to Elevation of Privileges...

7.8CVSS6.1AI score0.0013EPSS
SaveExploits0References5
Redos
Redos
•added 2025/08/26 12:00 a.m.•20 views

ROS-20250826-05

A vulnerability in the DBI module of the Perl DBI database interface is related to improper assignment of permissions to a a critical resource. Exploitation of the vulnerability allows an attacker to gain access to sensitive data, as well as cause a denial of service...

6.1CVSS7.3AI score0.00488EPSS
SaveExploits1
Snyk
Snyk
•added 2025/08/22 9:31 p.m.•8 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via storeAddContentPortletPreferences. An attacker can enumerate all tenants of a virtual instance by adding pages outside the default or main virtual instance and creating a list of...

6.7CVSS7AI score0.00277EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•4 views

CVE-2025-43759: Incorrect Permission Assignment for Critical Resource

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows admin users of a virtual instance to add pages that are not in the...

6.7CVSS5.8AI score0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/21 6:42 p.m.•12 views

CVE-2025-38742

Dell iDRAC Service Module iSM, versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

5.3CVSS7.1AI score0.00122EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/21 6:42 p.m.•45 views

CVE-2025-38742

Dell iDRAC Service Module (iSM) versions prior to 6.0.3.0 contain an Incorrect Permission Assignment for Critical Resource vulnerability that could allow a low-privileged, local attacker to achieve code execution. Public sources in the connected documents consistently tie this CVE (CVE-2025-38742...

5.3CVSS7.1AI score0.00122EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/08/21 12:01 a.m.•23 views

CVE-2025-27216

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges...

0.00302EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/21 12:01 a.m.•10 views

CVE-2025-27216

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges...

7.4AI score0.00302EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•4 views

CVE-2025-27216: Incorrect Permission Assignment for Critical Resource

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•5 views

CVE-2025-38742: Incorrect Permission Assignment for Critical Resource

Dell iDRAC Service Module iSM, versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

5.3CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•8 views

CVE-2025-1139: Incorrect Permission Assignment for Critical Resource

IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment...

6.1CVSS5.8AI score0.00111EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/13 5:26 p.m.•2 views

CVE-2025-5819 Incorrect Permission Assignment for Critical Resource in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances...

5CVSS5.8AI score0.00269EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/08/07 3:41 p.m.•6 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the /api/pull endpoint. An attacker can remove files from the file system by sending a specially crafted packet to this endpoint. Remediation Upgrade...

7.6CVSS7AI score0.00182EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•2 views

CVE-2025-54618: Incorrect Permission Assignment for Critical Resource

Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.7CVSS5.9AI score0.00131EPSS
SaveExploits0References1
Rows per page
Query Builder