CWE-732

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privile

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privileg

Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between s

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the s

Insecure permissions in Aginode GigaSwitch v5 allows attackers to access sensitive information via using the SCP command

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcup

Metabase Enterprise Edition is the enterprise version of Metabase business intelligence and data analytics software. Sta

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Nia

IBM Storage Scale 5.2.3.0 and 5.2.3.1 could allow an authenticated user to obtain sensitive information from files due t

An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when

Liferay Portal 7.3.0 through 7.4.3.119, and Liferay DXP 2023.Q3.1 through 2023.Q3.8, 2023.Q4.0 through 2023.Q4.5, 7.4 GA

FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows an

Overview  The product specifies permissions for a security-critical resource in a way that allows that resource to be

IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authoriz

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. Directories and fi

Vulnerability in the Oracle Solaris product of Oracle Systems (component: File system). The supported version that is

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to

A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2

cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grant

Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerabil

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True I

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissi

Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the fil

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrit

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it a

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS S

Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.

Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile() method in org.codelibs.fes

IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to i

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resou

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. A standard user

Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Res

The Commerce component in Liferay Portal 7.3.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Mani

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerab

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform

Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incor

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte