698 matches found
PT-2025-3978 · Transsion · Com.Transsion.Carlcare
Name of the Vulnerable Software and Affected Versions: com.transsion.carlcare affected versions not specified Description: The issue is related to improper permission settings for mobile applications, which may lead to information leakage risk. Recommendations: At the moment, there is no...
The vulnerability of the PowerScale OneFS operating system, related to the improper assignment of permissions for critical resources, allows a perpetrator to trigger a service failure.
The vulnerability of the PowerScale OneFS operating system is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the SecureAge Security Suite’s comprehensive protection software lies in the improper storage of permissions, allowing attackers to enhance their privileges.
The vulnerability of the SecureAge Security Suite software-related comprehensive protection lies in the improper storage of permissions. Exploiting this vulnerability can allow remote attackers to enhance their privileges...
ROS-20250115-01
A vulnerability in Mozilla Firefox, Firefox ESR, and Thunderbird email client is related to improper permission persistence. exploitation of the vulnerability could allow a remote attacker to affect the confidentiality of protected information, to affect the confidentiality of protected informati...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the improper assignment of permissions to critical resources. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerabilities in the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP are related to the improper assignment of permissions to critical resources. Exploiting these vulnerabilities can allow attackers, operating remotely, to...
The vulnerability of the Rancher Manager software for managing Kubernetes clusters lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.
The vulnerability of the Rancher Manager software for managing Kubernetes clusters is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Improper Preservation of Permissions
Overview lakefs-sdk is a lakeFS API Affected versions of this package are vulnerable to Improper Preservation of Permissions via the process of re-creating a user with the same username as a previously deleted one. An attacker can gain access to the system using the credentials of the deleted use...
The vulnerability of the access control and working time recording system within SIPORT is related to the improper assignment of permissions for critical resources, allowing intruders to increase their privileges.
The vulnerability of the access control and working time recording system within SIPORT is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the network management system for monitoring industrial networks in Siemens SINEC NMS lies in the improper assignment of permissions to critical resources. This allows a perpetrator to write arbitrary data to any location in the host’s file system.
The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to the improper assignment of permissions for critical resources. The application contains a database that does not restrict user rights. Exploiting this vulnerability allows a hacke...
The vulnerability of Grub2 operating system loaders, related to the incorrect use of standard permissions, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of Grub2 operating system loaders is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain unauthorized access to protected information...
The vulnerability of Fortinet FortiClientWindows security devices arises from the improper assignment of permissions to critical resources and incorrect synchronization settings (“Race Condition”). This allows attackers to execute arbitrary commands.
The vulnerability of Fortinet FortiClientWindows protection devices is related to the improper assignment of permissions for critical resources and incorrect synchronization “Race Condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the fsck.fat file system checking and recovery utility in the dosfstools package arises from the improper assignment of permissions to a critical resource. This allows an attacker to gain access to confidential data.
The vulnerability of the fsck.fat file system checking and recovery utility in the dosfstools set is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the ThinServer component of the Rockwell Automation ThinManager application management platform allows a attacker to execute arbitrary code.
The vulnerability of the ThinServer component of Rockwell Automation’s centralized application management platform, ThinManager, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Dream Report production report and analysis software lies in the improper assignment of permissions, which allows attackers to increase their privileges and cause service failures.
The vulnerability of the Dream Report production report and analysis software is related to the improper assignment of permissions. Exploiting this vulnerability can allow attackers to enhance their privileges and cause service interruptions...
The vulnerability of the Docker Daemon software for managing Brocade SANnav networks allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Docker Daemon software for managing Brocade SANnav networks is related to the improper assignment of permissions to a critical resource. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to gain unauthorized access to protected information and increase their privileges.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...
The vulnerability of the Docker software component for managing Brocade SANnav networks allows a hacker to read or modify protected information.
The vulnerability of the Docker software for network management in Brocade SANnav relates to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to read or modify protected information...
The vulnerability of the command-line interface (CLI) of Juniper Networks Junos OS Evolved operating systems, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the command-line interface CLI of Juniper Networks Junos OS Evolved operating systems is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...