4334 matches found
CVE-2025-22448
Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-20629
Insecure inherited permissions in the NVM Update Utility for some IntelR Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20629
Insecure inherited permissions in the NVM Update Utility for some IntelR Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20008
Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20008
Intel® Simics® Package Manager before version 1.12.0 has insecure inherited permissions that may allow a privileged local user to escalate privileges. The issue is acknowledged in Intel’s advisory (Intel® Simics® Package Manager Software Advisory) and CVSS data indicate high impact for local esca...
PT-2025-21066 · Intel · Intel Simics Package Manager
Name of the Vulnerable Software and Affected Versions: IntelR SimicsR Package Manager versions prior to 1.12.0 Description: The issue concerns insecure inherited permissions for some IntelR SimicsR Package Manager software. This may allow a privileged user to potentially enable escalation of...
PT-2025-21110 · Intel · Intel Simics Package Manager
Name of the Vulnerable Software and Affected Versions: IntelR SimicsR Package Manager versions prior to 1.12.0 Description: Insecure inherited permissions for some IntelR SimicsR Package Manager software may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-48905
Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...
CVE-2025-43595
An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 released on 2025-04-22...
CVE-2024-48905
Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...
CVE-2024-48905
Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...
CVE-2025-43595 MSP360 Backup (for Linux) insecure filesystem permissions
An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 released on 2025-04-22...
CVE-2024-48905
CVE-2024-48905 affects Sematell ReplyOne 7.4.3.0 with insecure permissions on the /rest/sessions endpoint, enabling potential unauthorized access. Root cause: insufficient access controls. CVSS v3.1 base score 9.1 (CRITICAL) affecting confidentiality and integrity. Exploitation details are not pr...
CVE-2024-48905
Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...
PT-2025-18712 · Sematell · Sematell Replyone
Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue concerns insecure permissions for the "/rest/sessions" endpoint. This could potentially allow unauthorized access or actions. Recommendations: For Sematell ReplyOne version 7.4.3.0,...
CVE-2024-48905
Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...
MSP360 Backup insecure filesystem permissions
RISK EVALUATION MSP360 Backup is a data backup and recovery solution. An insecure default permissions vulnerability allows a lower privileged user to execute commands with root level privileges in the 'Online Backup' folder. An attacker could exploit this vulnerability to obtain user...
CVE-2025-32981
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File...
CVE-2025-30408
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39904, Acronis Cyber Protect 16 Windows before build 39938...