Point B Getscreen 安全漏洞

Point B Getscreen is a browser-based remote desktop software from Point B Corporation. A security vulnerability exists in Point B Getscreen version 2.19.6, which stems from an unknown function in the file getscreen.msi that can lead to the creation of temporary files with insecure permissions...

PT-2024-38289 · Point B · Getscreen Agent

Name of the Vulnerable Software and Affected Versions: Point B Ltd Getscreen Agent version 2.19.6 Description: A critical issue was found in the Installation component of the software, specifically in the getscreen.msi file, which leads to the creation of a temporary file with insecure permission...

Insecure Permissions

github.com/kumahq/kuma is vulnerable to insecure permissions. The vulnerability is due to improper access control that allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Incorrect Access Control

github.com/cert-manager/cert-manager is vulnerable to Incorrect Access Control. The vulnerability is due to insecure permissions in cert-manager, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Privilege Escalation

github.com/volcano-sh/volcano is vulnerable to Privilege Escalation. The vulnerability is due to insecure permissions in Volcano, which allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

CVE-2023-50700

Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method...

CVE-2023-50700

Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method...

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

CVE-2024-40433

CVE-2024-40433 affects Tencent WeChat 8.0.37. Multiple connected sources describe an Insecure Permissions vulnerability that enables privilege escalation via the web-view component. Root cause and scope are tied to the web-view usage in WeChat, with impact described as elevation of privileges (hi...

CVE-2024-40433

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component...

CVE-2024-36542

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36542

Kuma CVE-2024-36542 affects Kuma v2.7.0 (and prior per sources) with insecure permissions causing exposure of the service account token, enabling attackers to access sensitive data and escalate privileges. Root cause: improper access control granting token access. CVSSv3.1 base score 8.8 (HIGH), ...

CVE-2024-36542

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

PT-2024-27063 · Kuma · Kuma

Name of the Vulnerable Software and Affected Versions: kuma version 2.7.0 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For kuma version 2.7.0, update to a version tha...

CVE-2024-36542

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

GHSA-C9CM-5J82-M6PJ fabedge has insecure permissions

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Volcano has insecure permissions

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

fabedge has insecure permissions

Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...