Lucene search
+L

698 matches found

Positive Technologies
Positive Technologies
added 2025/01/20 12:00 a.m.7 views

PT-2025-3978 · Transsion · Com.Transsion.Carlcare

Name of the Vulnerable Software and Affected Versions: com.transsion.carlcare affected versions not specified Description: The issue is related to improper permission settings for mobile applications, which may lead to information leakage risk. Recommendations: At the moment, there is no...

7.5CVSS6.8AI score0.00358EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:00 a.m.12 views

The vulnerability of the PowerScale OneFS operating system, related to the improper assignment of permissions for critical resources, allows a perpetrator to trigger a service failure.

The vulnerability of the PowerScale OneFS operating system is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

5CVSS5.5AI score0.00128EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:00 a.m.18 views

The vulnerability of the SecureAge Security Suite’s comprehensive protection software lies in the improper storage of permissions, allowing attackers to enhance their privileges.

The vulnerability of the SecureAge Security Suite software-related comprehensive protection lies in the improper storage of permissions. Exploiting this vulnerability can allow remote attackers to enhance their privileges...

10CVSS5.5AI score0.00593EPSS
SaveExploits0References2Affected Software1
Redos
Redos
added 2025/01/15 12:00 a.m.18 views

ROS-20250115-01

A vulnerability in Mozilla Firefox, Firefox ESR, and Thunderbird email client is related to improper permission persistence. exploitation of the vulnerability could allow a remote attacker to affect the confidentiality of protected information, to affect the confidentiality of protected informati...

7.5CVSS8.1AI score0.00603EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/01/14 12:00 a.m.36 views

The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the improper assignment of permissions to critical resources. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerabilities in the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP are related to the improper assignment of permissions to critical resources. Exploiting these vulnerabilities can allow attackers, operating remotely, to...

9.9CVSS8.1AI score0.00579EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.18 views

The vulnerability of the Rancher Manager software for managing Kubernetes clusters lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of the Rancher Manager software for managing Kubernetes clusters is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9.1CVSS7.2AI score0.00611EPSS
SaveExploits0References5Affected Software2
Snyk
Snyk
added 2024/11/26 8:42 p.m.4 views

Improper Preservation of Permissions

Overview lakefs-sdk is a lakeFS API Affected versions of this package are vulnerable to Improper Preservation of Permissions via the process of re-creating a user with the same username as a previously deleted one. An attacker can gain access to the system using the credentials of the deleted use...

6.9CVSS7AI score0.00355EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.25 views

The vulnerability of the access control and working time recording system within SIPORT is related to the improper assignment of permissions for critical resources, allowing intruders to increase their privileges.

The vulnerability of the access control and working time recording system within SIPORT is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.5AI score0.00142EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.27 views

The vulnerability of the network management system for monitoring industrial networks in Siemens SINEC NMS lies in the improper assignment of permissions to critical resources. This allows a perpetrator to write arbitrary data to any location in the host’s file system.

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to the improper assignment of permissions for critical resources. The application contains a database that does not restrict user rights. Exploiting this vulnerability allows a hacke...

8.4CVSS7.6AI score0.00135EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.17 views

The vulnerability of Grub2 operating system loaders, related to the incorrect use of standard permissions, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of Grub2 operating system loaders is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain unauthorized access to protected information...

7.2CVSS7.5AI score0.00323EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.11 views

The vulnerability of Fortinet FortiClientWindows security devices arises from the improper assignment of permissions to critical resources and incorrect synchronization settings (“Race Condition”). This allows attackers to execute arbitrary commands.

The vulnerability of Fortinet FortiClientWindows protection devices is related to the improper assignment of permissions for critical resources and incorrect synchronization “Race Condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.6CVSS7.9AI score0.00701EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.10 views

The vulnerability of the fsck.fat file system checking and recovery utility in the dosfstools package arises from the improper assignment of permissions to a critical resource. This allows an attacker to gain access to confidential data.

The vulnerability of the fsck.fat file system checking and recovery utility in the dosfstools set is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

5.6CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.11 views

The vulnerability of the ThinServer component of the Rockwell Automation ThinManager application management platform allows a attacker to execute arbitrary code.

The vulnerability of the ThinServer component of Rockwell Automation’s centralized application management platform, ThinManager, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00316EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.13 views

The vulnerability of the Dream Report production report and analysis software lies in the improper assignment of permissions, which allows attackers to increase their privileges and cause service failures.

The vulnerability of the Dream Report production report and analysis software is related to the improper assignment of permissions. Exploiting this vulnerability can allow attackers to enhance their privileges and cause service interruptions...

7.8CVSS5.5AI score0.00143EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:00 a.m.18 views

The vulnerability of the Docker Daemon software for managing Brocade SANnav networks allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Docker Daemon software for managing Brocade SANnav networks is related to the improper assignment of permissions to a critical resource. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.7CVSS5.5AI score0.0052EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:00 a.m.13 views

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to gain unauthorized access to protected information and increase their privileges.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...

7.1CVSS5.5AI score0.00173EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:00 a.m.13 views

The vulnerability of the Docker software component for managing Brocade SANnav networks allows a hacker to read or modify protected information.

The vulnerability of the Docker software for network management in Brocade SANnav relates to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to read or modify protected information...

4.6CVSS5.5AI score0.0024EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/13 12:00 a.m.22 views

The vulnerability of the command-line interface (CLI) of Juniper Networks Junos OS Evolved operating systems, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the command-line interface CLI of Juniper Networks Junos OS Evolved operating systems is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5CVSS5.5AI score0.00196EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/11/12 5:15 p.m.8 views

CVE-2024-9842

Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders...

3.3CVSS5.7AI score0.00212EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/12 5:14 p.m.12 views

CVE-2024-21937

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

7.3CVSS7.9AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder