4258 matches found
CVE-2022-38103
Insecure inherited permissions in the IntelR NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-38103
The issue CVE-2022-38103 affects Intel\u00A0NUC Software Studio Service installer prior to version 1.17.38.0. Insecure inherited permissions in the installer may allow an authenticated local user to potentially escalate privileges. Intel's advisory specifies remediation by updating to version 1.1...
CVE-2022-46656
Insecure inherited permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-41687
Insecure inherited permissions in the HotKey Services for some IntelR NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-41687
The Intel advisory INTEL-SA-00802 confirms CVE-2022-41687 affects the HotKey Services in Intel\u00ae NUC P14E Laptop Element software for Windows 10. Before version 1.1.44, insecure inherited permissions could let an authenticated user potentially escalate privileges via local access. Impact is p...
RESTEasy: creation of insecure temp files
In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...
PT-2023-13589 · Intel · Intel Nuc Software Studio Service
Name of the Vulnerable Software and Affected Versions: IntelR NUC Software Studio Service versions prior to 1.17.38.0 Description: The issue is related to insecure inherited permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local...
CVE-2020-23362
Insecure Permissons vulnerability found in ShopCMS YerShop all versions allows a remote attacker to escalate privileges via the coverid parameter...
Design/Logic Flaw
Insecure Permissons vulnerability found in ShopCMS YerShop all versions allows a remote attacker to escalate privileges via the coverid parameter...
CVE-2023-27408
A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. The i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interfac...
CVE-2020-23362
Insecure Permissons vulnerability found in ShopCMS YerShop all versions allows a remote attacker to escalate privileges via the coverid parameter...
CVE-2023-30399
Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack...
CVE-2023-30216
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...
CVE-2023-30216
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...
Information disclosure
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...
Code injection
Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack...
CVE-2023-30399
Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack...
CVE-2023-30216
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...
PT-2023-22670 · Garo · Garo Wallbox
Name of the Vulnerable Software and Affected Versions: GARO Wallbox GLB/GTB/GTC versions prior to v189 Description: The issue concerns insecure permissions in the settings page, allowing attackers to redirect users to a crafted update package link via a man-in-the-middle attack. Recommendations:...