Lucene search
+L

4328 matches found

NVD
NVD
added 2024/05/16 9:16 p.m.51 views

CVE-2024-21835

Insecure inherited permissions in some IntelR XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/16 9:15 p.m.21 views

CVE-2023-45736

Insecure inherited permissions in IntelR Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS6.7AI score0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/16 8:47 p.m.14 views

CVE-2023-45736

Insecure inherited permissions in IntelR Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.2AI score0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/15 6:25 p.m.28 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

7AI score0.00522EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/15 6:25 p.m.19 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

7.1AI score0.00522EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/15 6:25 p.m.151 views

CVE-2024-35102

VITEC AvediaServer (model avsrv-m8105) with version 8.6.2-1 is affected by an Insecure Permissions vulnerability that allows a remote attacker to escalate privileges via a crafted script. The core issue is improper permissions handling in the server, enabling privilege escalation without user int...

8.8CVSS7AI score0.00522EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/14 3:38 p.m.11 views

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

8.8CVSS5.8AI score0.00845EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/14 3:38 p.m.9 views

CVE-2024-34223

Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket...

4.3CVSS5.8AI score0.00477EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/14 3:38 p.m.29 views

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

8.8CVSS6.6AI score0.00845EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/14 3:25 p.m.10 views

CVE-2024-31771

Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file...

7.8CVSS5.8AI score0.00348EPSS
SaveExploits2References1
CVE
CVE
added 2024/05/13 5:33 p.m.117 views

CVE-2024-34221

CVE-2024-34221 affects Sourcecodester Human Resource Management System 1.0. The issue is described as an insecure permissions bug that can lead to privilege escalation. CVSS v3.1 metrics show a HIGH impact (C/H/I/A) with network attack vector, low attack complexity, and privileges required at LOW...

8.8CVSS6.8AI score0.00845EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/05/13 5:33 p.m.34 views

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

6.8AI score0.00845EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/05/13 5:33 p.m.14 views

CVE-2024-34221

Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation...

6.9AI score0.00845EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/05/13 12:00 a.m.14 views

PT-2024-25751 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Human Resource Management System version 1.0 Description: The issue is related to Insecure Permissions, which can result in privilege escalation. Recommendations: For Sourcecodester Human Resource Management System version 1.0,...

8.8CVSS6.8AI score0.00845EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/05/13 12:00 a.m.14 views

PT-2024-25753 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: The issue allows attackers to approve or reject leave tickets due to an insecure permission vulnerability in the /hrm/leaverequest.php file. Recommendations: For version...

4.3CVSS6.5AI score0.00477EPSS
SaveExploits1References3
NVD
NVD
added 2024/05/03 3:15 p.m.20 views

CVE-2024-29417

Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function...

8.4CVSS6.7AI score0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/03 12:00 a.m.35 views

CVE-2024-29417

Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function...

6.9AI score0.00195EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 12:00 a.m.24 views

CVE-2024-29417

Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function...

7.1AI score0.00195EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/03 12:00 a.m.67 views

CVE-2024-29417

CVE-2024-29417 concerns an insecure permissions flaw in e-trust Horacius 1.0, 1.1, and 1.2 that enables a local attacker to escalate privileges via the password reset function. Affected component is the password reset workflow, with root cause described as inappropriate/insufficient permissions o...

8.4CVSS7AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/26 8:15 p.m.29 views

CVE-2023-26603

JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer...

5.9CVSS6.7AI score0.00175EPSS
SaveExploits0References2
Rows per page
Query Builder