4328 matches found
CVE-2023-26603
JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer...
CVE-2023-26603
JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer...
CVE-2023-26603
Summary: JumpCloud Agent before 1.178.0 creates a temporary file in a directory with insecure permissions, enabling privilege escalation to SYSTEM via a repair action in the installer. This is evidenced across multiple sources (NVD/Red Hat/CNNVD/PT-Security/vulnrichment), which consistently descr...
The vulnerability of the Jenkins automation server relates to the creation of temporary files with insecure permissions, allowing a malicious actor to gain read, modify, or delete access to these files.
The vulnerability of the Jenkins automation server relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a remote attacker to gain read, modify, or delete access to these files...
CVE-2024-30723
CVE-2024-30723 is rejected/not used; this candidate was withdrawn by its CNA and has no vulnerability entry.
CVE-2024-26574
Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...
CVE-2024-26574
Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...
CVE-2024-26574
Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...
CVE-2024-26574
Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...
Trojan.Win32.Razy.abc MVID-2024-0678 Insecure Permissions
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/0eb4a9089d3f7cf431d6547db3b9484d.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Razy.abc Vulnerability: Insecure Permissions In memory IPC Family: Razy Type:...
CVE-2024-27605
Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users test can query information about the users in the system...
CVE-2024-27605
Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users test can query information about the users in the system...
CVE-2024-27605
Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users test can query information about the users in the system...
PT-2024-21964 · Alldata · Alldata
Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: The issue allows users, such as test, to query information about the users in the system due to insecure permissions. Recommendations: For Alldata version 0.4.6, restrict access to sensitive user information...
CVE-2024-27605
CVE-2024-27605 affects Alldata v0.4.6 and describes an Insecure Permissions issue that allows non-authenticated or insufficiently privileged users (e.g., user/test) to query information about other users in the system. Root cause cited across connected sources is misconfigured permissions exposin...
CVE-2024-27605
Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users test can query information about the users in the system...
CVE-2024-29666
CMSV6 Vehicle Monitoring platform (CMSV6) versions 7.31.0.2 through 7.32.0.3 contain an Insecure Permissions flaw that allows a remote attacker to escalate privileges via the default password component. Root cause is improper privilege management related to the default password mechanism. Red Hat...
CVE-2024-29666
Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component...
PT-2024-22955 · Cmsv6 · Cmsv6
Name of the Vulnerable Software and Affected Versions: Vehicle Monitoring platform system CMSV6 versions 7.31.0.2 through 7.32.0.3 Description: The issue allows a remote attacker to escalate privileges via the default password component. This is an Insecure Permissions vulnerability...