CVE-2020-8743

Improper permissions in the installer for the IntelR Mailbox Interface driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8741

Improper permissions in the installer for the IntelR ThunderboltTM non-DCH driver, all versions, for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0560

Improper permissions in the installer for the IntelR Renesas ElectronicsR USB 3.0 Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0564

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14054

Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...

CVE-2019-0134

Improper permissions in the IntelR Dynamic Platform and Thermal Framework v8.3.10208.5643 and before may allow an authenticated user to potentially execute code at an elevated level of privilege...

CVE-2018-3702

Improper permissions in the installer for the ITE Tech Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14629

Improper permissions in IntelR DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-11148

Improper permissions in the installer for IntelR Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14605

Improper permissions in the installer for the IntelR SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-14602

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-13035

Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, the Apache service httpd.exe will try to execute cmd.exe from C:\PandoraFMS the current directory a...

CVE-2019-14603

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11117

Improper permissions in the installer for IntelR Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack...

SAR-AutoDeploy-Layer 安全漏洞

SAR-AutoDeploy-Layer is a Lumigo open source SAR application used to automate the deployment of a Lambda layer to a region for all functions. A security vulnerability exists in SAR-AutoDeploy-Layer v1.2.0 that stems from improper permissions and could lead to elevated privileges and customer clou...

SAR-measure-cold-start 安全漏洞

SAR-measure-cold-start is an AWS Step Functions state machine open-sourced by Lumigo that helps measure the initialization time of Lambda functions. A security vulnerability exists in SAR-measure-cold-start v1.4.1, which stems from improper permissions and could lead to elevation of privilege and...

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions prior to 2.4.0p1, prior to 2.3.0p32, prior to 2.2.0p42, and 2.1.0p49 and earlier, which stems from improper permissions on the automated proxy update package and could lead to a local...

MSP360 Backup 安全漏洞

MSP360 Backup is a cross-platform data backup and recovery solution from MSP360, which supports hybrid backup with local storage and cloud storage and provides enterprise-level data protection. A security vulnerability exists in MSP360 Backup version 8.0, which stems from improper file system...

The vulnerability of Zabbix’s Web interface, the UI of the IT infrastructure monitoring system, allows a perpetrator to trigger a service failure or compromise the integrity of Zabbix’s Web interface resources.

The vulnerability of Zabbix’s Web interface, the monitoring system for IT infrastructure, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a malicious actor to cause service failures or compromise the integrity of Zabbix’s Web...

ROS-20250515-07

Vulnerability of RevertAction.Php, ApiFileRevert.Php files of MediaWiki hypertext environment implementation software is related to incorrect permissions saving. MediaWiki hypertext environment is related to incorrect permissions saving. Exploitation of the vulnerability could allow a remote...