CWE-278 · 7 kayıt
Insecure Preserved Inherited Permissions
Bu sınıftaki CVE’ler
7 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-2947İstismar yok | IBM i privilege escalationibm · i · CWE-278 | Kritik9,8 | — | %0,4 | 17 Nis 2025 |
35İzleyin | CVE-2024-36538İstismar yok | Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service accountchaos-mesh · chaos mesh · CWE-278 | Yüksek8,8 | — | %0,6 | 24 Tem 2024 |
35İzleyin | CVE-2024-37769İstismar yok | Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.b1ackc4t · 14finger · CWE-278 | Yüksek8,8 | — | %0,5 | 5 Tem 2024 |
29İzleyin | CVE-2023-38497Kavram kanıtı | Cargo not respecting umask when extracting crate archivesrust-lang · cargo · CWE-278 | Yüksek7,3 | — | %0,7 | 4 Ağu 2023 |
29İzleyin | CVE-2026-6265İstismar yok | Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2cerberusftp · ftp server · CWE-278 | Yüksek7,3 | — | %0,4 | 27 Nis 2026 |
26İzleyin | CVE-2026-71477İstismar yok | mise: Incorrect file ownership, when installed by the root user using `install.sh`jdx · mise · CWE-278 | Orta6,7 | — | %0,1 | 18 Ağu 2026 |
14İzleyin | CVE-2024-38531İstismar yok | Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible.nixos · nix · CWE-278 | Düşük3,6 | — | %0,1 | 28 Haz 2024 |
- CVE-2025-294739İzleyin
IBM i privilege escalation
KritikCVSS 9,8İstismar yokEPSS %0ibm · i17 Nis 2025
- CVE-2024-3653835İzleyin
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account
YüksekCVSS 8,8İstismar yokEPSS %1chaos-mesh · chaos mesh24 Tem 2024
- CVE-2024-3776935İzleyin
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.
YüksekCVSS 8,8İstismar yokEPSS %0b1ackc4t · 14finger5 Tem 2024
- CVE-2023-3849729İzleyin
Cargo not respecting umask when extracting crate archives
YüksekCVSS 7,3Kavram kanıtıEPSS %1rust-lang · cargo4 Ağu 2023
- CVE-2026-626529İzleyin
Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
YüksekCVSS 7,3İstismar yokEPSS %0cerberusftp · ftp server27 Nis 2026
- CVE-2026-7147726İzleyin
mise: Incorrect file ownership, when installed by the root user using `install.sh`
OrtaCVSS 6,7İstismar yokEPSS %0jdx · mise18 Ağu 2026
- CVE-2024-3853114İzleyin
Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible.
DüşükCVSS 3,6İstismar yokEPSS %0nixos · nix28 Haz 2024