CVE-2025-31655

Incorrect default permissions for some IntelR Battery Life Diagnostic Tool within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...

GIGABYTE MacroHub 安全漏洞

GIGABYTE MacroHub is an open-source recording software developed by GIGABYTE of Taiwan, China. GIGABYTE MacroHub has a security vulnerability, which stems from improper permissions when launching external applications. This vulnerability may allow authenticated local attackers to execute arbitrar...

Tanium Benchmark 安全漏洞

Tanium Benchmark is a security and operations status assessment module developed by the American company Tanium. Tanium Benchmark has security vulnerabilities, which stem from improper default permission settings...

SAMSUNG Galaxy Wearable 安全漏洞

Samsung Galaxy Wearable is a wearable device developed by South Korea’s Samsung Corporation, designed to connect wearable devices to your mobile devices. Versions of Samsung Galaxy Wearable prior to 2.2.68 contained a security vulnerability. This vulnerability stemmed from improper handling of...

WinAVR security vulnerability

WinAVR is an open-source microcontroller development toolkit developed by WinAVR. Version WinAVR 20100110 has a security vulnerability, which stems from improper permission settings. This vulnerability may lead to the modification of system files and executable files...

CVE-2026-24420

phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below allow an authenticated user without the dlattachment permission to download FAQ attachments due to a incomprehensive permissions check. The presence of a right key is improperly validated as proof of authorization in...

CVE-2026-0775

The CVE-2026-0775 entry concerns npm cli. Affected component: the module-loading path in npm cli, where modules are loaded from an unsecured location. Root cause: incorrect permission assignment that allows a local attacker who can run low-privileged code to escalate privileges and execute arbitr...

CVE-2025-67230

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...

WordPress Plugin Lawyer Directory Security Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

WordPress plugin WP Membership has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin: Final User security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin Hospital Doctor Directory has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin LazyTasks has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin Hydra Booking has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin xSmart has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Cisco Intersight security vulnerabilities

Cisco Intersight is an application platform developed by the American company Cisco. It offers intelligent management capabilities, enabling IT organizations to analyze, simplify, and automate their environments in a way that is more advanced than previous generations of tools. Cisco Intersight h...

WordPress plugin Modular DS modular-connector has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2023-4332

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file...

CVE-2021-27176

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl5g.cfg has cleartext passwords and 0644 permissions...

CVE-2021-0143

Improper permissions in the installer for the IntelR Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access...