4324 matches found
CVE-2023-34997
Affected software: Intel Server Configuration Utility (before version 16.0.9). Vulnerability: insecure inherited permissions in the installer, allowing an authenticated user with local access to potentially escalate privileges. Impact: privilege escalation with high impact on confidentiality, int...
CVE-2023-34314
Insecure inherited permissions in some IntelR Simics Simulator software before version 1.7.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-39230
CVE-2023-39230 concerns Intel® Rapid Storage Technology (RST). The Intel advisory confirms a vulnerability due to insecure inherited permissions in some RST software prior to version 16.8.5.1014.9, which may allow an authenticated user to potentially elevate privileges via local access. Affected ...
PT-2023-7280 · Intel · Intel Rapid Storage Technology
Name of the Vulnerable Software and Affected Versions: Intel Rapid Storage Technology versions prior to 16.8.5.1014.9 Description: The issue is related to insecure inherited permissions in Intel Rapid Storage Technology, which can be exploited to potentially enable escalation of privilege via loc...
PT-2023-25086 · Intel · Intel Server Configuration Utility
Name of the Vulnerable Software and Affected Versions: Intel Server Configuration Utility versions prior to 16.0.9 Description: The issue is related to insecure inherited permissions in the installer for some Intel Server Configuration Utility software. This may allow an authenticated user to...
PT-2023-24807 · Intel · Intel Simics Simulator
Name of the Vulnerable Software and Affected Versions: IntelR Simics Simulator versions prior to 1.7.2 Description: The issue is related to insecure inherited permissions in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access...
LOYTEC Electronics Insecure Transit / Insecure Permissions / Unauthenticated Access Vulnerabilities
Products from LOYTEC electronics such as Loytec LWEB-802, L-INX Automation Servers, L-IOB I/O Controllers, and L-VIS Touch Panels suffer from improper access control and insecure transit vulnerabilities. + CVE : CVE-2023-46380, CVE-2023-46381, CVE-2023-46382 + Title : Multiple vulnerabilities in...
LOYTEC Electronics Insecure Transit / Insecure Permissions / Unauthenticated Access
CVE : CVE-2023-46380, CVE-2023-46381, CVE-2023-46382 + Title : Multiple vulnerabilities in Loytec LWEB-802, L-INX Automation Servers, L-IOB I/O Controllers, L-VIS Touch Panels + Vendor : LOYTEC electronics GmbH + Affected Products : LINX-212 firmware 6.2.4, LVIS-3ME12-A1 firmware 6.2.2, LIOB-586...
CVE-2023-43984
Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...
Information disclosure
Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...
CVE-2023-43984
CVE-2023-43984 affects the PrestaShop Smart Soft Advanced Export module. Before v4.4.7, insecure permissions allow unauthenticated attackers to download user data from the ps_customer table due to improper access controls in the advancedexport component. Impact is user information disclosure; CVS...
CVE-2023-43984
Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...
CVE-2023-43984
Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...
PT-2023-29059 · Smartisoft · Advancedexport
Name of the Vulnerable Software and Affected Versions: Smart Soft advancedexport versions prior to 4.4.7 Description: The issue is related to insecure permissions in the advancedexport module, allowing unauthenticated attackers to download user information from the ps customer table...
BIT-PROCESSMAKER-2022-38577
ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators...
CVE-2023-45990
Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges...
CVE-2023-45990
Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve creating temporary files with insecure permissions, allowing attackers to escalate their privileges.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the creation of temporary files with insecure permissions. Exploiting these vulnerabilities can allow...
CVE-2023-45990
CVE-2023-45990 affects WenwenaiCMS v1.0. The Red Hat/NVD/CVE listings describe an Insecure Permissions vulnerability that allows a remote attacker to escalate privileges. The issue stems from improper permission handling inside WenwenaiCMS components, enabling unauthorized elevation of access wit...