Advisories · Weakness
CWE-275.
Every Advisory and CVE whose sources give the weakness CWE-275, newest first.
- CVSS 5.3 Medium
devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment
- devopspolis secrets-replicator
- Broken access control
- CWE-275
- CVSS 6.2 Medium
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.
- Huawei HarmonyOS
- CWE-275
- CVSS 5.3 Medium
xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission
- xianrendzw EasyReport
- Privilege escalation
- CWE-275
- CVSS 6.9 Medium
Uasoft Badaso File API api.php class permission
- Uasoft Badaso
- Privilege escalation
- CWE-275
- CVSS 8.5 High
StableBit DrivePool DrivePoolService DrivePool.Service.exe permission
- StableBit DrivePool
- Privilege escalation
- CWE-275
- CVSS 8.5 High
StableBit Scanner ScannerService Scanner.Service.exe permission
- StableBit Scanner
- Privilege escalation
- CWE-275
- CVSS 4.8 Medium
IObit Malware Fighter DLL permission
- IObit Malware Fighter
- Privilege escalation
- CWE-275
- CVSS 6.6 Medium
Permission control vulnerability in the audio framework.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-275
- CVSS 4.4 Medium
Permission control vulnerability in the clone module.
- Huawei HarmonyOS
- CWE-275
- CVSS 6.2 Medium
Permission control vulnerability in the projection module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-275
- CVSS 6.9 Medium
Vulnerability of improper permission control in the theme setting module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-275
- CVSS 5.5 Medium
Denial of service (DoS) vulnerability in the office service.
- Huawei HarmonyOS
- CWE-275
- CVSS 7.8 High
Use After Free (UAF) vulnerability in the office service.
- Huawei HarmonyOS
- CWE-275
- CVSS 8.5 High
Topaz SERVCore Teller Installer SERVCoreTeller_2.0.40D.msi permission
- Topaz SERVCore Teller
- Privilege escalation
- CWE-275
- CVSS 5.3 Medium
LitmusChaos Litmus LocalStorage permission
- Litmus
- Privilege escalation
- CWE-275
- CVSS 5.7 Medium
Unexpected injection event vulnerability in the multimodalinput module.
- Huawei HarmonyOS
- CWE-275
- CVSS 5.7 Medium
Permission control vulnerability in the distributed clipboard module.
- Huawei HarmonyOS
- CWE-275
- CVSS 5.7 Medium
Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera w…
- Huawei HarmonyOS
- CWE-275
- CVSS 5.3 Medium
Intelbras InControl HTTP PUT Request operador permission
- Intelbras InControl
- Privilege escalation
- CWE-275
- CVSS 6.9 Medium
ZeroWdd myblog MyBlogMvcConfig.java permission
- ZeroWdd myblog
- Privilege escalation
- CWE-275
- CVSS 5.3 Medium
Code4Berry Decoration Management System User Permission user_permission.php
- Code4Berry Decoration Management System
- Privilege escalation
- CWE-275
- CVSS 5.3 Medium
Code4Berry Decoration Management System User userregister.php permission
- Code4Berry Decoration Management System
- Privilege escalation
- CWE-275
- CVSS 6.3 Medium
Dreamer CMS Attachment permission
- Dreamer CMS
- CWE-275
- CVSS 5.4 Medium
Thecosy IceCMS Article permission
- Thecosy IceCMS
- CWE-275
- CVSS 4.7 Medium
CSZCMS File Manager Page templates permission
- CSZCMS
- Broken access control
- CWE-275
- CVSS 6.3 Medium
ZZZCMS Database Backup File save.php restore permission
- ZZZCMS
- CWE-275
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-275
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
- CWE-275
- CVSS 6.3 Medium
Intergard SGS permission
- Intergard SGS
- CWE-275
-
Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-275
- CVSS 7.8 High
cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges
- Juniper Networks Junos OS
- CWE-257
- CWE-275
- CVSS 7.8 High
ITarian - Local privilege escalation in Endpoint Manager agent on Windows
- ITarian Endpoint Manager Communication Client for Windows
- CWE-275
- CVSS 8.3 High
Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
- Mitsubishi Electric CPU Module Logging Configuration Tool
- Mitsubishi Electric CW Configurator
- CWE-275
- CVSS 3.3 Low
Local Priviledge escalation in Perfetto Dev scripts
- Google LLC Perfetto Dev Scripts
- CWE-275
- CVSS 9.1 CriticalCritical · CVSS 9+
Memory leak in ICMP6 in Linux Kernel
- Linux Kernel
- CWE-275
- CVSS 5.5 Medium
Information Leak in SA360-webquery-bigquery through read on /tmp
- Google LLC google/sa360-webquery-bigquery
- CWE-275
- CVSS 5.0 Medium
GateManager information leak for LinkManager Users
- Secomea GateManager
- CWE-274
- CWE-275
- CVSS 5.1 Medium
Incorrect mapping of Executable bits in Fuchsia Kernel
- Google LLC Fuchsia
- CWE-275
- CVSS 7.7 High
Insecure file and directory permissions on EdgeRover
- Western Digital EdgeRover
- CWE-275
- CVSS 7.5 High
Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability
- Cisco Aironet Access Point Software
- CWE-275
-
Check Point ZoneAlarm: Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete…
- Check Point ZoneAlarm
- CWE-275
- CVSS 6.7 Medium
Cisco Connected Mobile Experiences Privilege Escalation Vulnerability
- Cisco Connected Mobile Experiences
- CWE-275
- CVSS 5.0 Medium
Location service uses cached authorization even after revocation
- Canonical trust-store (Ubuntu)
- Canonical trust-store (Ubuntu RTM)
- CWE-275
- CVSS 7.8 High
ABB Central Licensing System - Weak File Permissions
- ABB Central Licensing System
- ABB Ability System 800xA
- CWE-275
- CVSS 7.8 High
ABB System 800xA Weak Registry Permissions
- ABB System 800xA Base
- CWE-275
- CVSS 4.4 Medium
Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability
- Cisco TelePresence TC Software
- CWE-275
- CVSS 4.1 Medium
Cisco RoomOS Software Privilege Escalation Vulnerability
- Cisco TelePresence CE Software
- CWE-275
- CVSS 7.8 High
Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution Vulnerability
- Cisco Nexus 9000 Series Switches in Standalone NX-OS Mode
- CWE-275
- CVSS 5.1 Medium
Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability
- Cisco Jabber for Mac
- CWE-275
-
Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability
- Cisco Prime Infrastructure
- CWE-275
-
A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by another user.
- Cisco Policy Suite unknown
- CWE-275
-
Nextcloud Server: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only…
- Nextcloud Server
- CWE-275
-
Nextcloud Server: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on…
- Nextcloud Server
- CWE-275
-
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file.
- Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4
- CWE-275
-
Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions.
- Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4
- CWE-275