#cwe-276

共收录 102 条相关情报。

← 返回所有主题
漏洞预警2026-08-14 发布INFO

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect de...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execu...

CVE-2026-63425

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Man

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage ma...

CVE-2025-52640

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without suffi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.

CVE-2026-65940

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to `settings.json` using Viper's ...

CVE-2026-48790

Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the us

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

CVE-2026-48790

Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the us

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-11 发布INFO

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

CVE-2026-59119

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hi...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in a...

CVE-2025-48505

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.

CVE-2026-21074

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during ...

CVE-2026-4793

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or wr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able t...

CVE-2026-39875

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able t...

CVE-2026-39874

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-26 发布HIGH

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. Ja...

CVE-2026-17497

NoteGen 是一个笔记应用,使用 Tauri 框架构建。在版本 0.32.0 之前,其默认桌面功能配置错误地授予了 Tauri shell 插件的 shell:allow-execute 权限,允许执行 bash、python、pyth

历史摘要 · 未重新核验 · NVD

安全公告2026-07-26 发布INFO

NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

CVE-2026-17497

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with ar

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-20 发布INFO

In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and ...

CVE-2026-16247

In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this proces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-20 发布INFO

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% ...

CVE-2026-16246

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-18 发布HIGH

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Att...

CVE-2023-54366

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELE

来源摘录 · NVD

漏洞预警2026-07-15 发布INFO

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client...

CVE-2026-40952

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services....

CVE-2026-61828

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and

历史摘要 · 未重新核验 · NVD