4220 matches found
CVE-2019-14935
3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation directory, allowing Full Control access for Everyone, and leading to privilege escalation because of a StartUp link...
CVE-2017-17060
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions...
CVE-2019-19382
Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation...
CVE-2019-18452
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions...
CVE-2019-19263
GitLab Enterprise Edition EE 8.2 and later through 12.5 has Insecure Permissions...
CVE-2005-1727
Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the 1 system cache folder and 2 Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."...
CVE-2009-4358
freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory /var/db/freebsd-update by default, which allows local users to read copies of sensitive files after a 1 freebsd-update fetch fetch or 2 freebsd-update upgrade upgrade operation...
PT-2025-22510 · Msp360 · Msp360 Backup
Name of the Vulnerable Software and Affected Versions: MSP360 Backup version 8.0 Description: An insecure file system permissions issue allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Recommendation...
PT-2025-22503 · Unknown · Fc-Stable-Diffusion-Plus
Name of the Vulnerable Software and Affected Versions: fc-stable-diffusion-plus version 1.0.18 Description: The issue is related to insecure permissions, which can allow attackers to escalate privileges and compromise the customer cloud account. Recommendations: For fc-stable-diffusion-plus versi...
CVE-2025-45471
Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account...
CVE-2025-45472
Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account...
CVE-2025-45468
Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...
CVE-2025-45471
Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account...
PT-2025-22495 · Unknown · Measure-Cold-Start
Name of the Vulnerable Software and Affected Versions: measure-cold-start version 1.4.1 Description: The issue is related to insecure permissions, which can be exploited by attackers to escalate privileges and compromise the customer cloud account. Recommendations: For measure-cold-start version...
PT-2025-22511 · Unknown · Autodeploy-Layer
Name of the Vulnerable Software and Affected Versions: autodeploy-layer version 1.2.0 Description: The issue is related to insecure permissions, allowing attackers to escalate privileges and compromise the customer cloud account. Recommendations: For autodeploy-layer version 1.2.0, consider...
CVE-2025-45468
CVE-2025-45468 affects fc-stable-diffusion-plus v1.0.18, caused by insecure permissions that enable privilege escalation and potential compromise of the customer cloud account. CVSS 3.1 base score 8.8 (HIGH) with network attack vector, low attack complexity, and privileges required: LOW. Exploita...
CVE-2025-45468
Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...
CVE-2025-45472
The CVE-2025-45472 entry covers insecure permissions in autodeploy-layer v1.2.0, enabling privilege escalation that could compromise the customer cloud account. Multiple sources corroborate that the issue is tied to improper access controls in autodeploy-layer and that it affects at least version...
CVE-2025-45471
CVE-2025-45471 affects measure-cold-start v1.4.1. The vulnerability arises from insecure permissions in the component, enabling privilege escalation and potential disclosure of the customer cloud account. Multiple feeds (NVD/Red Hat/CVE list) corroborate the issue; the NVD score is CVSS 3.1 with ...