CVE-2020-11716

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."...

CVE-2020-11716

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."...

Design/Logic Flaw

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."...

CVE-2020-11716

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."...

CVE-2020-11716

The CVE-2020-11716 entry concerns Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices—vulnerability described as Insecure Permissions, with affected products listed as End-of-software-support. Connected sources (Red Hat, NVD, CVE List, PT Security) specify the affected models and ver...

PT-2020-12802 · Panasonic · Eluga X1 Pro +2

Name of the Vulnerable Software and Affected Versions: Panasonic P110 versions through 2020-04-10 Eluga Z1 Pro versions through 2020-04-10 Eluga X1 versions through 2020-04-10 Eluga X1 Pro versions through 2020-04-10 Description: The issue is related to Insecure Permissions. The vendor has stated...

Intel® PROSet/Wireless WiFi Software x < 21.70.0 Multiple Vulnerabilities

A wireless network adapter driver on the remote host is affected by multiple security vulnerabilities: - Insecure inherited permissions in IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via loca...

SolarWinds MSP PME (Patch Management Engine) Cache Service Code Execution Vulnerability

SolarWinds Advanced Monitoring Agent is a set of monitoring agent software from SolarWinds, Inc. The software is mainly used for remote monitoring and management of servers, etc. SolarWinds MSP PME Cache Service is one of the patch management engine cache service. A security vulnerability exists ...

CVE-2020-5343

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder...

Design/Logic Flaw

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder...

CVE-2020-5343

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder...

Gigamon GigaVUE 5.5.01.11 Directory Traversal / File Upload Vulnerabilities

Gigamon GigaVUE version 5.5.01.11 suffers from directory traversal and file upload with command execution vulnerabilities. Gigamon has chosen to sunset this product and not offer a patch. Gigamon GigaVUE 5.5.01.11 Directory Traversal / File Upload Vulnerabilities An issue was discovered in Gigamo...

Gigamon GigaVUE 5.5.01.11 Directory Traversal / File Upload

Hi, An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value in the POST method from the original filename to achieve directory traversal via a ../ sequence and, for example, obtain a complete directory listing of the...

Privilege escalation

Insecure inherited permissions in IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

Denial Of Service (DoS)

redhat-ds-base is vulnerable to denial of service DoS. The vulnerability exists when multiple Red Hat Directory Server instances were configured on the system to run under different unprivileged users, the Directory Server setup scripts set insecure permissions on the /var/run/dirsrv/ directory,...

Authorization Bypass

rhn-client-tools is vulnerable to authorization bypass. The vulnerability exists as it was discovered that rhn-client-tools set insecure permissions on the loginAuth.pkl file, used to store session credentials for authenticating connections to Red Hat Network servers. A local, unprivileged user...

Arbitrary Code Execution

redhat-idm-console is vulnerable to arbitrary code execution. When running on Red Hat Enterprise Linux, Red Hat Directory Server 8.0 used insecure permissions on the redhat-idm-console startup script. Local users could modify this script and run arbitrary code with the privileges of the user...

Memu Play 7.1.3 - Insecure Folder Permissions

Exploit Title: Memu Play 7.1.3 - Insecure Folder Permissions Discovery by: chuyreds Discovery Date: 2020-03-08 Vendor Homepage: https://www.memuplay.com/ Software Link : https://www.memuplay.com/download-en.php?filename=Memu-Setup&from=officialrelease Tested Version: 7.1.3 Vulnerability Type: Loc...

Memu Play 7.1.3 - Insecure Folder Permissions Vulnerability

Exploit Title: Memu Play 7.1.3 - Insecure Folder Permissions Discovery by: chuyreds Vendor Homepage: https://www.memuplay.com/ Software Link : https://www.memuplay.com/download-en.php?filename=Memu-Setup&from=officialrelease Tested Version: 7.1.3 Vulnerability Type: Local Tested on OS: Windows 10...

CVE-2020-10601

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash...