4334 matches found
CVE-2024-57547
Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files...
CVE-2024-57276
Dragon Age Origins 1.05 is affected by an unquoted service path in the DAUpdaterSVC service. The service runs under NT AUTHORITY\SYSTEM with insecure permissions, enabling local privilege escalation by replacing or placing a malicious executable in the service path. Connected sources consistently...
CVE-2024-57547
CMSimple v5.16 is affected by an Insecure Permissions vulnerability in the backup file download functionality. A crafted script can exploit improper permissions to obtain sensitive information from backup PHP files. The issue is documented across multiple sources (including PT-2025-3468) and is d...
CVE-2024-57547
Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files...
Forescout SecureConnector 11.3.07 Privilege Escalation
Forescout SecureConnector versions 11.3.07 and below privilege escalation proof of concept that makes use of an insecure permissions vulnerability...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
PT-2025-3165 · Northern.Tech · Mender Client
Name of the Vulnerable Software and Affected Versions: Northern.tech Mender Client versions 4.0.0 through 4.0.4 Description: The issue is related to insecure permissions in the Northern.tech Mender Client. Recommendations: For Northern.tech Mender Client versions 4.0.0 through 4.0.4, update to...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
CVE-2024-55959
CVE-2024-55959 affects Northern.tech Mender Client 4.x prior to 4.0.5. The root cause is insecure permissions on a private key file, enabling unauthorized access and leading to potential confidentiality and integrity impacts. The CVSS v3.1 score is 9.1 (CRITICAL) with network attack vector, no us...
CVE-2024-40514
Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...
CVE-2024-40514
Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...
CVE-2024-40514
Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...
CVE-2024-40514
The vulnerability CVE-2024-40514 affects ThemesBrand ChatVia v5.3.2. The issue is described as an Insecure Permissions vulnerability that allows a remote attacker to escalate privileges via the User profile name and image upload functions. Affected component is the chat application (ThemesBrand C...
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools lies in the creation of a temporary file in a directory with incorrect permissions, allowing an attacker to escalate their privileges.
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to the creation of a temporary file in the directory with incorrect permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2024-40514
Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...
CVE-2024-39967
Insecure permissions in Aginode GigaSwitch v5 allows attackers to access sensitive information via using the SCP command...
Insecure Temporary File in RESTEasy
Impact In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user. Patches Fixed in the following pull requests:...