CWE-732

An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execut

The PowerPack Pro for Elementor plugin for WordPress is vulnerable to privilege escalation in all versions up to, and in

A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edi

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <=

A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privi

CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to imp

A vulnerability has been identified in SINUMERIK 828D V4 (All versions), SINUMERIK 828D V5 (All versions < V5.24), SINUM

Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker t

A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secr

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allow

The GriceMobile com.grice.call application 4.5.2 for Android enables any installed application (with no permissions) to

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exp

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuratio

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows loc

Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability a

IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated privileges on the system due

Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which a

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a mali

A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows loca

A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a loca

Nagios NDOUtils before 2.1.4 allows privilege escalation from nagios to root because certain executable files are owned

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local

VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability all

HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and fo

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileg

Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalat

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\

A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file

Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Se

G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allow

Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability all

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerabi

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerabi

A local low-level user on the server machine with credentials to the running OAS services can create and execute a repor

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to acce

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume m

Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerabilit

Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerabilit

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerabil

Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vu

The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability

Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may al

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies ass