CWE-275: Permission Issues
Weaknesses in this category are related to improper assignment or handling of permissions.
From the CWE List. © The MITRE Corporation.
Newest
- esengine deepseek-reasonix ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission 5.3 Medium
- No product listed kubescape Output printresults.go GetWriter permission 2.4 Low
- devopspolis secrets-replicator devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment 5.3 Medium
- huawei harmonyos Permission control vulnerability in the event notification module.Impact: Successful exploitation... 6.2 Medium
- xianrendzw easyreport xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission 5.3 Medium
- uasoft badaso Uasoft Badaso File API api.php class permission 6.9 Medium
- stablebit drivepool StableBit DrivePool DrivePoolService DrivePool.Service.exe permission 8.5 High
- stablebit scanner StableBit Scanner ScannerService Scanner.Service.exe permission 8.5 High
- iobit malware fighter IObit Malware Fighter DLL permission 4.8 Medium
- huawei emui, harmonyos +1 more Permission control vulnerability in the audio framework. Impact: Successful exploitation of this... 6.6 Medium
- huawei harmonyos Permission control vulnerability in the clone module. Impact: Successful exploitation of this... 4.4 Medium
- huawei emui, harmonyos +1 more Permission control vulnerability in the projection module. Impact: Successful exploitation of... 6.2 Medium
- huawei emui, harmonyos +1 more Vulnerability of improper permission control in the theme setting module. Impact: Successful... 6.9 Medium
- huawei harmonyos Denial of service (DoS) vulnerability in the office service. Successful exploitation of this... 5.5 Medium
- huawei harmonyos Use After Free (UAF) vulnerability in the office service. Successful exploitation of this... 7.8 High
- topaz servcore teller Topaz SERVCore Teller Installer SERVCoreTeller_2.0.40D.msi permission 8.5 High
- litmuschaos litmus LitmusChaos Litmus LocalStorage permission 5.3 Medium
- huawei harmonyos Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful... 5.7 Medium
- huawei harmonyos Permission control vulnerability in the distributed clipboard module. Impact: Successful... 5.7 Medium
- huawei harmonyos Vulnerability of bypassing the process to start SA and use related functions on distributed... 5.7 Medium
- intelbras incontrol, incontrol web +1 more Intelbras InControl HTTP PUT Request operador permission 5.3 Medium
- zerowdd myblog ZeroWdd myblog MyBlogMvcConfig.java permission 6.9 Medium
- code4berry decoration management system Code4Berry Decoration Management System User Permission user_permission.php 5.3 Medium
- code4berry decoration management system Code4Berry Decoration Management System User userregister.php permission 5.3 Medium
- dreamer cms, iteachyou dreamer cms +1 more Dreamer CMS Attachment permission 6.3 Medium
- thecosy icecms Thecosy IceCMS Article permission 5.4 Medium
- cskaza cszcms CSZCMS File Manager Page templates permission 4.7 Medium
- zzzcms ZZZCMS Database Backup File save.php restore permission 6.3 Medium
- huawei emui, harmonyos +1 more Parameter verification vulnerability in the installd module. Successful exploitation of this... 9.1 Critical
- huawei emui, harmonyos +1 more Parameter verification vulnerability in the installd module. Successful exploitation of this... 9.1 Critical
- intergard sgs, smartgard silver with matrix keyboard +1 more Intergard SGS permission 6.3 Medium
- huawei emui, harmonyos +1 more Vulnerability of apps' permission to access a certain API being incompletely verified in the... 5.3 Medium
- juniper junos, juniper networks junos os +1 more cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges 7.8 High
- itarian endpoint manager communication client for windows, endpoint manager communication client +1 more ITarian - Local privilege escalation in Endpoint Manager agent on Windows 7.8 High
- mitsubishi electric cpu module logging configuration tool, cw configurator, data transfer +33 more +35 more Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues 8.3 High
- google perfetto, google llc perfetto dev scripts +1 more Local Priviledge escalation in Perfetto Dev scripts 3.3 Low
- google sa360 webquery to bigquery exporter, google llc google/sa360-webquery-bigquery +1 more Information Leak in SA360-webquery-bigquery through read on /tmp 5.5 Medium
- linux kernel, netapp a400 firmware, aff 8300 firmware +11 more +13 more Memory leak in ICMP6 in Linux Kernel 9.1 Critical
- secomea gatemanager GateManager information leak for LinkManager Users 5.0 Medium
- google fuchsia Incorrect mapping of Executable bits in Fuchsia Kernel 5.1 Medium
- western digital edgerover Insecure file and directory permissions on EdgeRover 7.7 High
- cisco aironet access point software, catalyst 9800 firmware, wireless lan controller software +2 more Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability 7.5 High
- check point zonealarm point zonealarm, checkpoint zonealarm +1 more Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary... 5.5 Medium
- cisco connected mobile experiences Cisco Connected Mobile Experiences Privilege Escalation Vulnerability 6.7 Medium
- canonical trust-store (ubuntu rtm), trust-store (ubuntu), trust-store \(ubuntu\) +1 more +3 more Location service uses cached authorization even after revocation 5.0 Medium
- abb advabuild, central licensing system, compact hmi +15 more +17 more ABB Central Licensing System - Weak File Permissions 7.8 High
- abb system 800xa base, 800xa base system +1 more ABB System 800xA Weak Registry Permissions 7.8 High
- cisco telepresence collaboration endpoint, telepresence tc software +1 more Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability 4.4 Medium
- google android In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible... 8.8 High
- cisco roomos, telepresence ce software, telepresence codec c40 firmware +2 more +4 more Cisco RoomOS Software Privilege Escalation Vulnerability 4.1 Medium
- Show olderLoading…