EUVD-2023-42332

Malicious code in bioql PyPI...

EUVD-2022-25083

Malicious code in bioql PyPI...

PT-2016-7979 · Debian · Pdns

Name of the Vulnerable Software and Affected Versions: pdns versions prior to 3.3.1-1 Description: The issue arises from the pdns package in Debian, where the MySQL user is created with excessive privileges. Specifically, the maintainer scripts of pdns-backend-mysql grant too wide database...

CVE-2025-47937

CVE-2025-47937 affects TYPO3 (PHP-based CMS). The issue arises in TYPO3 versions 9.0.0 through just before the fixed ELTS releases, where a DBAL multi-table query applies FrontendGroupRestriction only to the first table. This can allow data from additional tables in the same query to be exposed t...

CVE-2025-4374

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository. Mitigation Permissions can be updated after creation but there's no preventative measure...

PT-2025-2723 · Ibm · Ibm Security Verify Access Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8 Description: The issue allows a local privileged user to perform unauthorized actions due to incorrect permissions assignment. Recommendations: For versions...

CVE-2024-44188

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-27795

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...

CVE-2023-49783

CVE-2023-49783 affects SilverStripe Admin. In 1.x before 1.13.19 and 2.x before 2.1.8, users who lack edit/delete permissions for ModelAdmin records can still edit/delete records via the CSV import form if they have create permissions. The issue can enable unintended record modification, though t...

PT-2023-30527 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: Pimcore versions prior to 11.1.1 Description: The issue allows backend users with basic permissions to execute arbitrary SQL statements by passing input directly into an SQL statement through the /admin/object/grid-proxy endpoint. This is due...

BHIMA 安全漏洞

BHIMA is a free, open source accounting and hospital information management system HIMS open source from IMAWorldHealth.org in Congo. A security vulnerability exists in BHIMA version 1.27.0. An attacker exploited the vulnerability to update the permissions of any account registered in the...

SUSE-SU-2022:3353-1 Security update for permissions

This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths bsc1203018...

OPENSUSE-SU-2022:10128-1 Security update for permissions

This update for permissions fixes the following issues: Update to version 20200127: chkstat: also consider group controlled paths boo1203018, CVE-2022-31252...

SUSE-SU-2022:2632-1 Security update for permissions

This update for permissions fixes the following issues: apptainer: fix starter-suid location bsc1198720 static permissions: remove deprecated bind / named chroot entries bsc1200747 postfix: add postlog setgid for maildrop binary bsc1201385...

PT-2022-37506 · Apptainer +3 · Apptainer +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as vulnerable in the provided descriptions. Description: The issue concerns updates for permissions that fix several problems, including the starter-suid location in apptainer, removal of...

MGASA-2022-0217 Updated logrotate packages fix security vulnerability

A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an...

OPENSUSE-SU-2021:4192-1 Security update for permissions

This update for permissions fixes the following issues: - Update to version 20181225: drop ping capabilities in favor of ICMPPROTO sockets bsc1174504...

Federated share recipient can increase permissions - ownCloud

The receiver of a federated share could update the permissions granted to the receivers of the share...

SUSE-SU-2020:1857-1 Security update for permissions

This update for permissions fixes the following issues: - Removed conflicting entries which might expose pcp to security issues bsc1171883...

SUSE-SU-2020:0969-1 Security update for permissions

This update for permissions fixes the following issues: - Fixed spelling of icinga group bsc1168364...