CVE-2020-7979

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-8114

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-8114

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

Design/Logic Flaw

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-8114

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-7979

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-8114

CVE-2020-8114 affects GitLab EE 8.9 through 12.7.2 with an insecure permission issue (privilege-related). The vulnerability is described consistently across multiple sources (OSV, CNVD, NVD, CNVD clones). Impact is marked high (CP/I/H/A), but exploitation details are not provided in the documents...

CVE-2020-8114

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2020-8114

Removed by vendor...

CVE-2019-14925

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the file system allows an attacker to read sensitive configuration settings such as usernames,...

Design/Logic Flaw

An issue was discovered on Mitsubishi Electric ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the file system allows an attacker to read sensitive configuration settings such as usernames, passwords, and othe...

CVE-2019-14925

An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the file system allows an attacker to read sensitive configuration settings such as usernames,...

Uplay 92.0.0.6280 Local Privilege Escalation

Exploit Title: Uplay 92.0.0.6280 - Local Privilege Escalation Date: 2019-08-07 Exploit Author: Kusol Watchara-Apanukorn, Pongtorn Angsuchotmetee, Manich Koomsusi Vendor Homepage: https://uplay.ubisoft.com/ Version: 92.0.0.6280 Tested on: Windows 10 x64 CVE : N/A Vulnerability Description:...

Privilege escalation

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges...

CVE-2019-12808

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges...

CVE-2019-12808

CVE-2019-12808 affects ALTOOLS update service (version 18.1 and earlier). The root cause is insecure file permissions that allow an attacker to overwrite an executable that is launched as a service, enabling local privilege escalation to SYSTEM. The available documents confirm the vulnerability a...

CVE-2019-2023

In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8....

CVE-2019-7729

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. The Bosch Smart Home App is not affected. iOS Apps ar...

Design/Logic Flaw

AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical resource and executable files...

CVE-2018-15809

AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical resource and executable files...