4257 matches found
CVE-2024-36587
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...
CVE-2024-36587
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...
UBUNTU-CVE-2024-36587
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...
CVE-2024-36587
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...
CVE-2024-36587
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...
PT-2024-27084 · Unknown · Dnscrypt-Proxy
Name of the Vulnerable Software and Affected Versions: DNSCrypt-proxy versions 2.0.0alpha9 through 2.1.5 Description: The issue is related to insecure permissions in DNSCrypt-proxy, allowing non-privileged attackers to escalate privileges to root. This can be achieved by overwriting the binary...
CVE-2024-36587
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...
CVE-2024-36691
Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...
CVE-2024-36691
PPGo_Jobs v2.8.0 is affected by CVE-2024-36691 due to insecure permissions in AdminController.AjaxSave(). Authenticated users can arbitrarily modify other users’ account information. The vulnerability arises from insufficient access control on the AjaxSave() endpoint. Affected component: AdminCon...
CVE-2024-36691
Insecure permissions in the AdminController.AjaxSave method of PPGoJobs v2.8.0 allows authenticated attackers to arbitrarily modify users' account information...
CVE-2024-36821
Insecure permissions in Linksys Velop WiFi 5 WHW01v1 1.1.13.202617 allows attackers to escalate privileges from Guest to root...
CVE-2023-38533
A vulnerability has been identified in TIA Administrator All versions V3 SP2. The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process...
CVE-2023-38533
A vulnerability has been identified in TIA Administrator All versions V3 SP2. The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process...
CVE-2023-38533
A vulnerability has been identified in TIA Administrator All versions V3 SP2. The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process...
CVE-2023-38533
Siemens TIA Administrator (
CVE-2024-36821
Insecure permissions in Linksys Velop WiFi 5 WHW01v1 1.1.13.202617 allows attackers to escalate privileges from Guest to root...
CVE-2024-36821
CVE-2024-36821 affects Linksys Velop WiFi 5 (WHW01v1) with firmware 1.1.13.202617. The Red Hat and NVD entries describe insecure permissions that permit escalation from Guest to root, indicating a privilege-escalation vulnerability. The exact vulnerable component is a permissions/authorization is...
PT-2024-27170 · Linksys · Linksys Velop Wifi 5
Name of the Vulnerable Software and Affected Versions: Linksys Velop WiFi 5 WHW01v1 version 1.1.13.202617 Description: The issue is related to insecure permissions, allowing attackers to escalate privileges from Guest to root. Recommendations: For version 1.1.13.202617, at the moment, there is no...