CVE-2024-33894

Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges...

CVE-2024-33894

Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges...

CVE-2024-33894

Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges...

CVE-2024-33894

CVE-2024-33894 affects HMS/Ewon Cosy+ industrial remote access devices. The issue is insecure permissions that allow several processes to run with elevated privileges on Cosy+ firmware 21.x < 21.2s10 or 22.x

Intel Extreme Tuning Utility < 7.14.0.15 Insecure Permission Vulnerability (intel-sa-01066)

The version of Intel Extreme Tuning Utility installed on the remote host is prior to 7.14.0.15. It is, therefore, affected by an insecure permission vulnerability as referenced in the intel-sa-01066 advisory. - Insecure inherited permissions in some Intel® XTU software before version 7.14.0.15 m...

CVE-2024-31771

TotalAV 6.0.740 is affected by an Insecure Permission vulnerability enabling local privilege escalation via crafting a file. The connected exploit documentation (GitHub) details a local attacker writing a DLL (via a junction trick to map a user-controlled path to C:\Windows\System32) and triggeri...

CVE-2024-32368

Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component...

CVE-2024-32368

Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component...

CVE-2024-32368

CVE-2024-32368 concerns the Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW 3.0. The Red Hat advisory confirms an issue in the BLE component where insecure permissions enable a local attacker to cause a denial of service. The vulnerability affects the BLE permissions/handling, leading to pote...

PT-2024-24536 · Agasta · Agasta Sanketlife 2.0 Pocket 12-Lead Ecg Monitor

Name of the Vulnerable Software and Affected Versions: Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor version 3.0 Description: The issue allows a local attacker to cause a denial of service via the Bluetooth Low Energy BLE component. This is due to an insecure permission vulnerability...

BIT-GITLAB-2020-7979

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission...

CVE-2023-46352

In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" facebookconversiontrackingplus up to version 2.4.9 from Smart Modules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from...

CVE-2023-29860

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

CVE-2022-48392

In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2023-29838

Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the SyncService.exe file...

Design/Logic Flaw

Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the SyncService.exe file...

CVE-2023-29838

The CVE-2023-29838 entry describes an insecure permissions issue in Botkind/Siber Systems SyncApp v.19.0.3.0, enabling a local attacker to escalate privileges via the SyncService.exe. Concrete details across connected sources identify the affected product and the root cause, but no explicit explo...

CVE-2023-30399

Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack...

Remote code execution in Voyager

Insecure Permission vulnerability found in Voyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

GHSA-2X3R-7JGM-GH8X Remote code execution in Voyager

Insecure Permission vulnerability found in Voyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...