CVE-2011-3349

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation...

Design/Logic Flaw

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...

IBM Spectrum Protect Plus CVE-2019-4652 Insecure File Permission Vulnerability

Description IBM Spectrum Protect Plus is prone to insecure file-permission vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. IBM Spectrum Protect Plus versions 10.1.0 through 10.1....

Insecure File Permission

rubyparser-legacy has insecure file permission configured on its Ruby files. World-writable Ruby files would allow a local user to insert malicious Ruby code into several Ruby files, which would be executed when the library is used...

Adobe Download Manager CVE-2019-8071 Insecure File Permission Vulnerability

Description Adobe Download Manager is prone to an insecure file-permission vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions with elevated privileges; this may aid in launching further attacks. Adobe Download Manager 2.0.0.3...

Uplay 92.0.0.6280 - Local Privilege Escalation

Uplay 92.0.0.6280 - Local Privilege Escalation Exploit Title: Uplay 92.0.0.6280 - Local Privilege Escalation Date: 2019-08-07 Exploit Author: Kusol Watchara-Apanukorn, Pongtorn Angsuchotmetee, Manich Koomsusi Vendor Homepage: https://uplay.ubisoft.com/ Version: 92.0.0.6280 Tested on: Windows 10 x...

CVE-2019-11167

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11167

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11167

CVE-2019-11167 affects Intel Smart Connect Technology for Intel NUC. Root cause: improper file permissions in the software installer, enabling an authenticated local user to escalate privileges via local access. According to the Intel advisory, the vendor does not provide patches and recommends u...

Intel® Smart Connect Technology for Intel® NUC Advisory

Summary: A potential security vulnerability in Intel® Smart Connect Technology for Intel® NUC may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and is issuing a Product Discontinuation notice for Intel® Smart Connect Technology for Intel®...

CVE-2019-15084

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM...

CVE-2016-10849

cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...

SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1722-1)

This update for glib2 provides the following fix : Security issues fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. CVE-2018-16428: Avoid a NULL pointer dereference that could crash glib2 users in markup processing bnc1107121. CVE-2018-16429:...

SUSE-SU-2019:1722-1 Security update for glib2

This update for glib2 provides the following fix: Security issues fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. - CVE-2018-16428: Avoid a null pointer dereference that could crash glib2 users in markup processing bnc1107121. - CVE-2018-1642...

openSUSE Security Update : glib2 (openSUSE-2019-1650)

This update for glib2 fixes the following issues : Security issue fixed : - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. Other issue addressed : - glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thu...

Security update for glib2 (important)

openSUSE Security Update: Security update for glib2 Announcement ID: openSUSE-SU-2019:1650-1 Rating: important References: 1103678 1137001 Cross-References: CVE-2019-12450 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available.Description...

SUSE-SU-2019:14102-1 Security update for glib2

This update for glib2 fixes the following issues: Security issue fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001...

SUSE SLES12 Security Update : glib2 (SUSE-SU-2019:1596-1)

This update for glib2 fixes the following issues : Security issues fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. CVE-2018-16428: Avoid a NULL pointer dereference bsc1107121. CVE-2018-16429: Fixed out-of-bounds read vulnerability...

SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2019:1594-1)

This update for glib2 fixes the following issues : Security issue fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. Other issue addressed: glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thus...