CVE-2023-29835

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function...

Design/Logic Flaw

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function...

Design/Logic Flaw

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2023-29835

CVE-2023-29835 affects Wondershare Dr.Fone v12.9.6. The root issue is an insecure permission in the service permission function that enables a local attacker to escalate privileges (privilege/impact: high). Exploitation specifics are not provided in the documents. The vulnerability is listed with...

CVE-2020-36070

CVE-2020-36070 affects Voyager (Yoyager) versions 1.4 and earlier. The vulnerability is described as an insecure permission issue that allows a remote attacker to execute arbitrary code by supplying a crafted PHP file to the media component. The issue is classified as critical (CVSS v3.1: 9.8, Ne...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2023-29835

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function...

CVE-2023-29835

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function...

CVE-2023-26099

An issue was discovered in Telindus Apsal 3.14.2022.235 b. The consultation permission is insecure...

Security Bulletin: IBM CICS TX Standard is vulnerable to allowing sensitive information to be disclosed due to insecure permission settings (CVE-2022-34314).

Summary IBM CICS TX Standard could allow sensitive information to be disclosed due to insecure permission settings. The fix removes this vulnerability CVE-2022-34314 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34314 DESCRIPTION: IBM CICS TX could disclose sensitive information...

Security Bulletin: IBM CICS TX Advanced is vulnerable to allowing sensitive information to be dislosed due to insecure permission settings (CVE-2022-34314).

Summary IBM CICS TX Advanced could allow sensitive information to be disclosed due to insecure permission settings. The fix removes this vulnerability CVE-2022-34314 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34314 DESCRIPTION: IBM CICS TX could disclose sensitive information...

Design/Logic Flaw

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

Design/Logic Flaw

In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-45544

Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. NOTE: this is disputed by the vendor because an admin is intentionally allowed to upload new executable PHP code, such as a theme...

Design/Logic Flaw

DISPUTED Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. NOTE: this is disputed by the vendor because an admin is intentionally allowed to upload new executable PHP code, such as...

CVE-2022-45544

Schlix CMS 2.2.7-2 contains an insecure permission flaw that allows an attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. The vendor disputes that this is a generic vulnerability, arguing only admins should be able to upload executable PHP code. Public report...

CVE-2022-47359

In log service, there is a missing permission check. This could lead to local denial of service in log service...

PHOENIX CONTACT Emalytics Controller ILC Incorrect Permission Assignment For Critical Resource (CVE-2020-8768)

An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device. Th...

CVE-2022-20506

In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-2261330...

rConfig <= 3.x Multiple Vulnerabilities

rConfig is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rconfig:rconfig"; if description...