#cwe-732
共收录 231 条相关情报。
← 返回所有主题 漏洞预警2026-09-10 发布INFO
CVE-2026-19583
Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell
历史摘要 · 未重新核验 · NVD
安全公告2026-09-10 发布INFO
CVE-2026-19583
Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-07 发布INFO
CVE-2026-80054
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-07 发布INFO
CVE-2026-80054
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-07 发布INFO
CVE-2026-82312
OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial
历史摘要 · 未重新核验 · NVD
安全公告2026-09-04 发布INFO
CVE-2026-80112
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-04 发布INFO
CVE-2026-80112
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-03 发布INFO
CVE-2021-43613
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in run
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-02 发布INFO
CVE-2026-78604
Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-02 发布INFO
CVE-2026-84806
Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated
历史摘要 · 未重新核验 · NVD
安全公告2026-09-02 发布INFO
CVE-2026-84806
Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-08-31 发布INFO
CVE-2026-82697
A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe5
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-27 发布INFO
CVE-2026-59292
PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-27 发布INFO
CVE-2026-64896
Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functiona
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-79783
rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local back
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-24 发布INFO
CVE-2026-78553
RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key fil
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-21 发布INFO
CVE-2026-14208
Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2026-18270
Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability al
历史摘要 · 未重新核验 · NVD
安全公告2026-08-20 发布INFO
CVE-2026-76399
In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-20 发布INFO
CVE-2026-76388
In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role cou
历史摘要 · 未重新核验 · GitHub Advisory