CVE-2019-9890

The CVE-2019-9890 issue affects GitLab Community and Enterprise Edition versions 10.x and 11.x up to 11.6.10 (10.x), 11.7.x up to 11.7.6, and 11.8.x up to 11.8.1, where the vulnerability is described as having insecure permissions. The connected data confirms the affected product family and the r...

Privilege escalation

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM...

CVE-2018-20621

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM...

CVE-2018-20621

The CVE-2018-20621 issue affects Microvirt MEmu 6.0.6, specifically the MemuService.exe service binary. The root cause is insecure permissions set at install time, enabling binary planting that allows local privilege escalation. Successful exploitation yields code execution as NT AUTHORITY/SYSTEM...

CVE-2018-20621

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM...

Design/Logic Flaw

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. The Bosch Smart Home App is not affected. iOS Apps ar...

CVE-2019-7729

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. The Bosch Smart Home App is not affected. iOS Apps ar...

Intel Data Center Manager SDK File Local Insecure File Permissions Vulnerability

Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A local insecure file permission vulnerability exists in Intel Data Center Manager SDK versions prior to 5.0.2. An authenticated...

Denial Of Service

tuned is vulnerable to denial of service DoS. The vulnerability can happen because of creation of PID file with insecure permissions, allowing local users to kill arbitrary processes...

CVE-2018-15835

Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983...

CVE-2018-15835

Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983...

Code injection

Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983...

CVE-2018-15835

CVE-2018-15835 concerns Android OS battery information broadcasts. The connected materials indicate the issue arises from insecure permissions around system broadcast data, allowing apps to access high‑precision battery information without special permissions. Android versions 1.0 through 9.0 are...

CVE-2018-15835

Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983...

Design/Logic Flaw

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

CVE-2018-11002

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

CVE-2018-11002

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

CVE-2018-11002

Pulse Secure Desktop Client for Windows (versions 5.3 through R6.0 build 1769) has an insecure-permissions flaw in its file handling that can enable writing to arbitrary files and overwrite contents. Root cause is insecure permissions within the affected component/file paths on Windows. No explic...

CVE-2018-11002

Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...

CVE-2017-1418

CVE-2017-1418 affects IBM Integration Bus and WebSphere Message Broker, with insecure file permissions on certain files that allow a local attacker to modify or delete them. Affected products/versions per the sources: IBM Integration Bus V10.0.0.0–10.0.0.11 and V9.0.0.0–9.0.0.10; WebSphere Messag...