CVE-2022-27958

Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...

CVE-2022-27960

Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...

CVE-2022-27960

Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...

CVE-2022-27958

Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...

Information disclosure

Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...

Design/Logic Flaw

Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...

CVE-2022-27960

CVE-2022-27960 affects OFCMS v1.1.4. The issue stems from insecure permissions configured in the user_id parameter within SysUserController.java, enabling an attacker to access and arbitrarily modify users’ personal information. The Network vulnerability arises from insufficient access control on...

CVE-2022-27958

Summary: CVE-2022-27958 affects FEBS-Security v1.0. The issue is insecure permissions configured in the userid parameter at /user/getuserprofile, enabling an attacker to access and arbitrarily modify users’ personal information. Details from connected sources: The Red Hat CVE reference corroborat...

CVE-2022-27958

Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...

FEBS-Security 安全漏洞

FEBS-Security is a simple and efficient backend privilege management system. A security vulnerability exists in FEBS-Security v1.0, which stems from insecure permissions configured in the userid parameter of /user/getuserprofile, allowing an attacker to access and arbitrarily modify a user's...

Backdoor.Win32.Bifrose.uw Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9e4f942c60044feef0fb48538ffac383.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Bifrose.uw Vulnerability: Insecure Permissions Description: The malware writes a ".EX...

The vulnerability of Adobe Photoshop Elements, related to the creation of temporary files with insecure resolutions, allows a hacker to escalate their privileges.

The vulnerability of Adobe Photoshop Elements relates to the creation of temporary files with insecure resolutions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Backdoor.Win32.Cyn.20 Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/3dd1da64e306cae0409e154e15dd1b80.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Cyn.20 Vulnerability: Insecure Permissions Description: The malware writes a ".EXE"...

CVE-2021-43085

Removed by vendor...

The vulnerability of the Adobe Creative Cloud Desktop Application, related to the creation of temporary files with insecure permissions, allows a malicious actor to obtain root privileges and re-record any file.

The vulnerability of the Adobe Creative Cloud Desktop Application relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to obtain root privileges and re-record any file...

The vulnerability of the Adobe Genuine Service application checking service lies in the creation of temporary files with insecure permissions, allowing a violator to increase their privileges.

The vulnerability of the Adobe Genuine Service application checking service is related to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2022-0652

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710...

CVE-2022-24236

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts...

CVE-2022-24236

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts...

CVE-2022-26247

TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...