#cwe-276

共收录 102 条相关情报。

← 返回所有主题
漏洞预警2026-09-16 发布INFO

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-86359

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth login writes Seqera Platform OIDC bearer tokens to ${NXF_HO...

CVE-2026-48722

Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived from the agent name ...

CVE-2026-86836

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIF

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.

CVE-2026-11813

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a lo

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which...

CVE-2026-77393

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenti

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-05 发布CRITICAL

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POS...

CVE-2026-52766

YesWiki 是一个基于 PHP 的 wiki 系统。在版本 4.6.6 之前,{{erasespamedcomments}} wiki 动作(位于 actions/EraseSpamedCommentsAction.php)存在严重安全

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gatewa...

CVE-2026-77393

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected ...

CVE-2026-81302

PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more ...

CVE-2026-9634

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directorie

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more...

CVE-2026-9633

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directori

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissio...

CVE-2026-81682

openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes

历史摘要 · 未重新核验 · NVD

安全公告2026-08-27 发布INFO

openssl_encrypt before 1.4.9 Insecure File Permissions

CVE-2026-81682

openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-25 发布INFO

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system ...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is e

历史摘要 · 未重新核验 · NVD

安全公告2026-08-24 发布INFO

RansomLook created its Flask session-signing key without explicitly restricting the file...

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key fil

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-24 发布INFO

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key file was created using the process's default permissions and...

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal com...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, conta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on af...

CVE-2026-18273

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit...

CVE-2026-58564

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-15 发布INFO

A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to inco...

CVE-2026-19893

A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf

历史摘要 · 未重新核验 · NVD

安全公告2026-08-14 发布INFO

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

CVE-2026-53657

### Impact On an instance of Lima running with `qemu` driver, an arbitrary user in the VM could access `/run/lima-guesta

历史摘要 · 未重新核验 · GitHub Advisory