CVE-2018-15491: Incorrect Permission Assignment for Critical Resource

A vulnerability in the permission and encryption implementation of Zemana Anti-Logger 1.9.3.527 and prior fixed in 1.9.3.602 allows an attacker to take control of the whitelisting feature MyRules2.ini under %LOCALAPPDATA%\Zemana\ZALSDK to permit execution of unauthorized applications such as ones...

CVE-2018-1551: Incorrect Permission Assignment for Critical Resource

IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888...

CVE-2018-5490: Incorrect Permission Assignment for Critical Resource

Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and therefore may allow more than "read-only" access from authenticated SMBv2 and SMBv3 clients. This behavior has been resolved in the GA release. Customers running prior release...

Input validation

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...

CVE-2017-7535

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...

CVE-2017-7535

Foreman prior to version 1.16.0 is vulnerable to a stored XSS in the organizations/locations assignment to hosts. Exploitation requires a user to assign hosts to an organization whose name contains HTML, which is visible to the user before action is taken. The CVE is documented across multiple so...

CVE-2017-7535

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...

CVE-2017-7535

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...

CVE-2017-7535: Improper Neutralization of Input During Web Page Generation

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...

PT-2018-8400

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.16.0 Description The issue allows for a stored XSS in organizations/locations assignment to hosts. This can be exploited when a user assigns hosts to an organization with HTML in its name, which is visible to the us...

WEM 4.5 - Users are not Getting Desktop Icons Assigned from WEM

Users are not getting Desktop icons assigned from WEM. Icons should be copied to the user's Desktop from a shared folder as per Action/Assignment configured from WEM server...

CVE-2018-5540: Incorrect Permission Assignment for Critical Resource

On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2013. Notes: none...

Mercurial has Incorrect Permission Assignment for Critical Resource

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name...

CVE-2018-14043: Incorrect Permission Assignment for Critical Resource

mstdlib aka the M Standard Library for C 1.2.0 has incorrect file access control in situations where Mfspermscanaccess attempts to delete an existing file that lacks public read/write access during a copy operation, related to fs/mfs.c and fs/mfspath.c. An attacker could create the file and then...

Qualcomm Multimode Call Processing Services Android Data Compromise

The vulnerability of Qualcomm Multimode Call Processing Services in the Android operating system is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Dialogic PowerMedia XMS Privilege Assignment Vulnerability

Dialogic PowerMedia XMS is a suite of software multimedia servers for real-time communications from Dialogic, Inc. that provide real-time multimedia communication solutions for IMS, MRF, enterprise and WebRTC applications. A privilege assignment vulnerability in Dialogic PowerMedia XMS 3.5 and...

Code injection

Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user...

CVE-2018-11642

Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user...

CVE-2018-11642

CVE-2018-11642 affects Dialogic PowerMedia XMS (3.5 and earlier). The flaw is an incorrect privilege assignment in the /var/www/xms/cleanzip.sh shell script that runs periodically, enabling a local attacker to execute code with root privileges. Connected documents corroborate the local-privation ...