The vulnerability of Siemens Sinumerik programmable logic controllers lies in the improper assignment of permissions for the scripts executed by the system. This allows attackers to increase their privileges.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to the incorrect assignment of permissions for the system’s scripts. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2024-8699 · Grub2 +2 · Grub2 +2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue is related to grub2, where attackers with access to the grub shell can access files on encrypted disks. This is due to incorrectly used standard permissions. Exploitation of the iss...

PT-2024-28135 · Avirtum · Avirtum Ipanorama 360 Wordpress Virtual Tour Builder

Name of the Vulnerable Software and Affected Versions: Avirtum iPanorama 360 WordPress Virtual Tour Builder versions 1.8.3 and earlier Description: The issue affects the Avirtum iPanorama 360 WordPress Virtual Tour Builder, allowing access to functionality not properly constrained by Access Contr...

PT-2024-34339 · Unknown · Whale Browser Installer

Name of the Vulnerable Software and Affected Versions: Whale browser Installer versions prior to 3.1.0.0 Description: The issue allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. Recommendations: For versions prior to 3.1.0.0, update to...

Exment 安全漏洞

Exment is Exceedone's open source simple, easy, lightweight, free web database. A security vulnerability exists in Exment versions 6.1.4 and earlier and 5.0.11 and earlier, which stems from an incorrect assignment of permissions to critical resources and a stored cross-site scripting vulnerabilit...

The vulnerability of the Zabbix universal monitoring system, related to the improper assignment of permissions for critical resources, allows a intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Zabbix universal monitoring system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the Zabbix universal monitoring system, related to improper maintenance of permissions, allows attackers to increase their privileges.

The vulnerability of the Zabbix universal monitoring system is related to improper maintenance of permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab CE/EE versions prior to 17.0 to...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-34648

Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data...

PT-2024-26082 · Samsung · Samsung Assistant

Name of the Vulnerable Software and Affected Versions: Samsung Assistant versions prior to 9.1.00.7 Description: The issue is related to the improper handling of insufficient permissions in Samsung Assistant, allowing remote attackers to access location data. User interaction is required for...

The vulnerability of the Cisco IOS XR operating system, related to the improper assignment of permissions to critical resources, allows attackers to bypass the Cisco Secure Boot function and load unverified software.

The vulnerability of the Cisco IOS XR operating system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a attacker to bypass the Cisco Secure Boot mechanism and load unverified software...

SUSE CVE-2024-7975

Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

PT-2024-26032 · Unknown · Knoxdualdarpolicy

Name of the Vulnerable Software and Affected Versions: KnoxDualDARPolicy versions prior to SMR Aug-2024 Release 1 Description: The issue is related to the improper handling of insufficient permission, allowing local attackers to access sensitive data. This could potentially lead to unauthorized...

The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms for corporate information lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms for corporate information lies in the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN

Overview ZWX-2000CSW2-HN provided by ZEXELON CO., LTD. is a high-speed coaxial modem with wireless LAN functions. ZWX-2000CSW2-HN contains multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 - CVE-2024-39838 Incorrect permission assignment for critical resource CWE-732 -...

(0Day) Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Hydra Sdk...

The vulnerability of the rpm-ostree package allows unauthorized access to authentication data on Red Hat Enterprise Linux and Fedora operating systems.

The vulnerability of the rpm-ostree package in Red Hat Enterprise Linux and Fedora systems is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to authentication data...

Webmin Security Vulnerabilities

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin versions prior to 2.003, which stems from insufficient or improperly handled permissions in the ajaxterm module...

The vulnerability of the Hitachi Storage Provider for VMware vCenter storage system, related to the improper use of standard permissions, allows a malicious actor to read or modify protected information.

The vulnerability of the Hitachi Storage Provider for VMware vCenter storage system is related to the improper use of standard permissions. Exploiting this vulnerability may allow an attacker to read or modify the protected information...