#cwe-732

共收录 231 条相关情报。

← 返回所有主题
漏洞预警2026-08-11 发布INFO

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hi...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is vulnerable to a local privilege escalation due to an insec...

CVE-2026-69108

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authen...

CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege

历史摘要 · 未重新核验 · NVD

安全公告2026-08-10 发布INFO

A flaw was found in libvirt. During storage volume clone or convert operations, newly created...

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were tempora

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` ut...

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were tempora

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local pr...

CVE-2026-15430

Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布MEDIUM

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgresql_data` option is selected, a Postg...

CVE-2026-68563

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and th

来源摘录 · NVD

安全公告2026-07-28 发布INFO

Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption

CVE-2026-50570

Fission v1.24.0 added PodSpec safety validation for tenant-facing Environment and Function CRDs (`ValidatePodSpecSafety`

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-27 发布INFO

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionO...

CVE-2026-64707

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequo

历史摘要 · 未重新核验 · NVD

安全公告2026-07-25 发布INFO

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

CVE-2026-61892

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). Supported versions that are affected are 12.2.3-12.2.15. Easily...

CVE-2026-62519

Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). Suppor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' convers...

CVE-2026-63358

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in dsu.h with...

CVE-2026-65069

Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sphash.h w...

CVE-2026-65068

Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in intern.h with o...

CVE-2026-65067

Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in ring.h with...

CVE-2026-65066

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_E

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in roaring....

CVE-2026-65065

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in shm_generic.h ...

CVE-2026-65064

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in radix.h with...

CVE-2026-65063

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EX

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sortedset.h ...

CVE-2026-65062

Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EX

历史摘要 · 未重新核验 · NVD