#cwe-732

共收录 231 条相关情报。

← 返回所有主题
漏洞预警2026-05-29 发布INFO

Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator c...

CVE-2026-9508

Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow bac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and writ...

CVE-2026-8070

Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s vali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary...

CVE-2026-7480

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

CVE-2026-45353

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布MEDIUM

A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulnerability stems from the the PSAdminAgent service, which c...

CVE-2026-9789

CVE-2026-9789 是一个影响 Acer NitroSense 软件(版本低于 3.01.3052)的本地权限提升(LPE)漏洞。漏洞源于 PSAdminAgent 服务,该服务创建了一个具有弱访问控制列表(ACL)的命名管道。任何

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain API endpoints related to pl...

CVE-2026-2254

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, d

历史摘要 · 未重新核验 · NVD

安全公告2026-05-27 发布INFO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...

CVE-2025-43290

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protec...

CVE-2025-43290

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

CVE-2026-25112

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory. _make_special_file() passes the tar header's linknam...

CVE-2026-42497

Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directo

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free...

CVE-2026-45246

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite p

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials...

CVE-2026-45246

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution. ...

CVE-2026-8612

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cac

历史摘要 · 未重新核验 · NVD

安全公告2026-05-14 发布INFO

Electerm Local code through electerm's single-instance socket

CVE-2026-45353

### Impact _Local code execution without UI interaction: any same-user process can send a JSON payload to electerm's sin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp...

CVE-2026-42937

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-13 发布INFO

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl REST. These vulnerabilities may allow a...

CVE-2026-42937

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names.  Note: Software versions which have ...

CVE-2026-42058

An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics commands and in BIG-IP iControl REST. These vulnerabilities may ...

CVE-2026-41959

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics command

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with resource administrator or administrator role to execute a...

CVE-2026-41217

A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell (tmsh) undisclosed command which may allow an authenticated attacker to view sensitive info...

CVE-2026-40462

Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell (tmsh) undisclosed command which m

历史摘要 · 未重新核验 · NVD