#cwe-732

共收录 231 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access...

CVE-2026-111499

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-30 发布INFO

Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue ...

CVE-2026-118574

Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrect

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to anoth

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布HIGH

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.

CVE-2026-107055

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布HIGH

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.

CVE-2026-107047

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the ap

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布HIGH

Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.

CVE-2026-107044

Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily mani

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布HIGH

Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via sup...

CVE-2026-107042

Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布HIGH

Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to ar...

CVE-2026-107039

Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布HIGH

Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content.

CVE-2026-107026

Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwri

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布MEDIUM

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content.

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrari

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-28 发布MEDIUM

An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive rout...

CVE-2026-103404

An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Sma

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-27 发布INFO

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with...

CVE-2026-92377

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-10-27 发布INFO

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Mo...

CVE-2026-90464

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote,

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-73 #cwe-732

安全公告2026-10-23 发布INFO

virtualenv: Seeded files retain permissions from an older cache

CVE-2026-113720

## Summary The app-data copy seeder uses shutil.copy, which preserves cached file modes independently of the current um

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-732 #severity:medium

漏洞预警2026-10-23 发布HIGH

A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra account to execute arbitrary commands as root. The installe...

CVE-2026-50057

A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra ac

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-23 发布INFO

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scrip...

CVE-2025-30054

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with roo

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-23 发布INFO

The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permiss...

CVE-2025-30051

The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials,

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-21 发布INFO

NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected insta...

CVE-2026-111184

NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

安全公告2026-10-21 发布INFO

Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows...

CVE-2026-114105

Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attackers to set setuid, setg

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-732 #severity:medium

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to copy cached package files into later env...

CVE-2026-113720

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses

历史摘要 · 未重新核验 · NVD

#cve #cwe-732