4258 matches found
CVE-2023-30399
The CVE-2023-30399 issue affects GARO Wallbox GLB/GTB/GTC before v189. It stems from insecure permissions on the settings page, enabling an attacker with network access to redirect users to a crafted update package link via a man-in-the-middle attack. Impact is high (unauthorized modification/red...
PT-2023-22592 · Unknown · Newbee-Mall
Name of the Vulnerable Software and Affected Versions: newbee-mall versions prior to commit 1f2c2dfy Description: The issue is related to insecure permissions in the updateUserInfo function, which allows attackers to obtain user account information. Recommendations: For versions prior to commit...
CVE-2023-30216
The CVE-2023-30216 entry affects the open-source e-commerce system newbee-mall prior to commit 1f2c2dfy, where the updateUserInfo function has insecure permissions. This configuration flaw allows attackers to obtain user account information, as described across multiple sources. Root cause: impro...
postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...
Medium: docker
Issue Overview: A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the supplementary group access setup. CVE-2022-36109 Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker...
Amazon Linux 2 : docker (ALASDOCKER-2023-024)
The version of docker installed on the remote host is prior to 20.10.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2023-024 advisory. A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the...
CVE-2023-29835
Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function...
PT-2023-11800 · Voyager · Voyager
Name of the Vulnerable Software and Affected Versions: Voyager versions 1.4 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted .php file to the media component. This is due to an Insecure Permission vulnerability. Recommendations: For Voyager...
CVE-2022-31244
Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation...
CVE-2022-31244
Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation...
Privilege escalation
Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation...
CVE-2022-31244
Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation...
PT-2023-13031 · Nokia · Nokia Onends
Name of the Vulnerable Software and Affected Versions: Nokia OneNDS version 17r2 Description: The issue is related to Insecure Permissions, which allows for privilege escalation. Recommendations: For Nokia OneNDS version 17r2, at the moment, there is no information about a newer version that...
CVE-2022-31244
Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation...
CVE-2022-31244
CVE-2022-31244 relates to Nokia OneNDS 17r2, where an insecure permissions/privilege management issue enables local privilege escalation. The publicly documented details describe specific sudo-based abuse: certain roles (ONENDS_CC_BASIC_ADMIN and ONENDS_CC_SERVICE_ADMIN) can run privileged comman...
Nokia OneNDS 20.9 Insecure Permissions / Privilege Escalation Vulnerability
=============================================================================== title: Incorrect Permission Assignment product: Nokia OneNDS 20.9 vulnerability type: Security Misconfiguration severity: High CVSS Score: 7.8 CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H found on:...
Nokia OneNDS 20.9 Insecure Permissions / Privilege Escalation
=============================================================================== title: Incorrect Permission Assignment product: Nokia OneNDS 20.9 vulnerability type: Security Misconfiguration severity: High CVSS Score: 7.8 CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H found on:...
Nokia OneNDS 17 Insecure Permissions / Privilege Escalation
=============================================================================== title: Incorrect Permission Assignment product: Nokia OneNDS 17 vulnerability type: Security Misconfiguration severity: High CVSS Score: 7.8 CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H found on: 31/03/20...
