#cwe-732

共收录 231 条相关情报。

漏洞预警2026-09-22 发布INFO

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on...

CVE-2026-89282

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissio

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-22 发布INFO

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execut...

CVE-2026-89281

The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth fallback token directory and JSON file are create...

CVE-2026-77268

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback file containing refresh and ac...

CVE-2026-77256

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

安全公告2026-09-22 发布INFO

MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask

CVE-2026-77256

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-732

安全公告2026-09-22 发布INFO

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

CVE-2026-77268

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-732

漏洞预警2026-09-22 发布INFO

The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_install.log and a named pipe (FIFO) at /var/log/misp_install...

CVE-2026-95667

The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_ins

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-732

安全公告2026-09-22 发布INFO

MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

CVE-2026-95667

The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_ins

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-732

漏洞预警2026-09-21 发布INFO

Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local acc...

CVE-2026-49811

Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resourc

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-18 发布INFO

An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and ...

CVE-2026-13673

An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM)

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

安全公告2026-09-18 发布INFO

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized...

CVE-2026-85887

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose informat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-732 #severity:high

漏洞预警2026-09-18 发布INFO

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

CVE-2026-85887

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose informat

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-17 发布INFO

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an ImportedClusterSecrets ...

CVE-2026-45726

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a st

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522 #cwe-732

漏洞预警2026-09-17 发布INFO

vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls.setDefaultCACertificates() and replace process-wide cert...

CVE-2026-92941

vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-15 发布INFO

Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth login writes Seqera Platform OIDC bearer tokens to ${NXF_HO...

CVE-2026-48722

Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-276 #cwe-732

漏洞预警2026-09-15 发布INFO

Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileged attacker to es...

CVE-2026-76159

Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions bef

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

安全公告2026-09-11 发布INFO

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

CVE-2026-59148

## Summary Mockoon's admin API ([`commons-server/src/libs/server/admin-api.ts`](https://github.com/mockoon/mockoon/blob

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-306 #cwe-352 #cwe-732 #cwe-942

漏洞预警2026-09-11 发布INFO

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path v...

CVE-2026-87988

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through comma

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-11 发布INFO

NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening ...

CVE-2026-57843

NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-10 发布INFO

A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the co...

CVE-2026-84828

A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can e

历史摘要 · 未重新核验 · NVD

#cve #cwe-732