#cwe-732

共收录 231 条相关情报。

← 返回所有主题
漏洞预警2026-09-10 发布INFO

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints...

CVE-2026-19583

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

Velociraptor Required Permissions bypass by using client monitoring queries

CVE-2026-19583

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-80054

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Incorrect Permission Assignment for Critical Resource ...

CVE-2026-80054

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

CVE-2026-82312

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...

CVE-2026-80112

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-04 发布INFO

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in th...

CVE-2026-80112

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

CVE-2021-43613

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in run

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries (CAPEC-642). On Windows systems wher...

CVE-2026-78604

Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and read-only access to ...

CVE-2026-84806

Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Kimai before 2.63.0 Authorization Bypass via Team Access Endpoints

CVE-2026-84806

Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function session_st...

CVE-2026-82697

A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with worl...

CVE-2026-59292

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affect...

CVE-2026-64896

Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functiona

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on atta...

CVE-2026-79783

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local back

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key file was created using the process's default permissions and...

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-21 发布INFO

Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86)\Remote Utilities - Host\), granting FULL CONTROL (F) to...

CVE-2026-14208

Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected i...

CVE-2026-18270

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability al

历史摘要 · 未重新核验 · NVD

安全公告2026-08-20 发布INFO

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify...

CVE-2026-76399

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk...

CVE-2026-76388

In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role cou

历史摘要 · 未重新核验 · GitHub Advisory