CVE-2025-45472

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account...

ABB Cylon Aspect Studio 3.08.03 Insecure Permissions

Summary ABB Cylon ASPECT Studio is a graphical programming tool and integrated development environment IDE for ABB Cylon ASPECT products. It's used to engineer comprehensive area control and graphical user interface GUI solutions, containing a library of logical and graphical widgets. It allows...

CVE-2025-45468

Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account...

CVE-2002-2407

Certain patches for QNX Neutrino realtime operating system RTOS 6.2.0 set insecure permissions for the files 1 /sbin/io-audio by OS Update Patch A, 2 /bin/shutdown, 3 /sbin/fs-pkg, and 4 phshutdown by QNX experimental patches, 5 cpim, 6 vpim, 7 phrelaycfg, and 8 columns, 9 othello, 10 peg, 11...

CVE-2025-48070

Plane is open-source project management software. Versions prior to 0.23 have insecure permissions in UserSerializer that allows users to change fields that are meant to be read-only, such as email. This can lead to account takeover when chained with another vulnerability such as cross-site...

CVE-2025-48070 Plane has insecure permissions in UserSerializer

Plane is open-source project management software. Versions prior to 0.23 have insecure permissions in UserSerializer that allows users to change fields that are meant to be read-only, such as email. This can lead to account takeover when chained with another vulnerability such as cross-site...

CVE-2025-48070

Plane is an open-source project management tool. The CVE-2025-48070 entry details insecure permissions in the UserSerializer on versions prior to 0.23, allowing changes to read-only fields (e.g., email). This can lead to account takeover when chained with another vulnerability such as XSS. The is...

CVE-2005-0715

AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box...

CVE-2005-1430

Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty pty that is managed by a non-setuid program, which allows local users to read or modify sessions of other users...

CVE-2003-0359

nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code...

CVE-2005-3012

The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images...

PT-2025-22443 · Plane · Plane

Name of the Vulnerable Software and Affected Versions: Plane versions prior to 0.23 Description: The issue concerns insecure permissions in the UserSerializer that allow users to modify fields intended to be read-only, such as the email. This can potentially lead to account takeover when combined...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20629

Insecure inherited permissions in the NVM Update Utility for some IntelR Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-22448

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-22448

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-22448

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-22448

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20629

Insecure inherited permissions in the NVM Update Utility for some IntelR Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access...