Lucene search
+L

4324 matches found

NVD
NVD
added 2021/10/26 2:15 p.m.28 views

CVE-2021-37363

An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.exe file located in bin folder and replace with a malicious file that would connect back to an attacking computer giving system level privileges nt authority\system due to the...

9.3CVSS0.01618EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/10/26 2:15 p.m.6 views

CVE-2021-37364

OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify permission to openclinic folders/files. A low privilege account is able to rename mysqld.exe or tomcat8.exe files located in bin folders and replace with a malicious file that would...

9.3CVSS7.2AI score0.01318EPSS
SaveExploits0References4
Prion
Prion
added 2021/10/26 2:15 p.m.31 views

Path traversal

OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify permission to openclinic folders/files. A low privilege account is able to rename mysqld.exe or tomcat8.exe files located in bin folders and replace with a malicious file that would...

9.3CVSS7.6AI score0.01318EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/26 2:15 p.m.7 views

CVE-2021-37363

An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.exe file located in bin folder and replace with a malicious file that would connect back to an attacking computer giving system level privileges nt authority\system due to the...

9.3CVSS7.2AI score0.01618EPSS
SaveExploits1References3
Prion
Prion
added 2021/10/26 2:15 p.m.25 views

Path traversal

An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.exe file located in bin folder and replace with a malicious file that would connect back to an attacking computer giving system level privileges nt authority\system due to the...

9.3CVSS7.6AI score0.01618EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/10/26 1:23 p.m.34 views

CVE-2021-37364

OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has the modify permission to openclinic folders/files. A low privilege account is able to rename mysqld.exe or tomcat8.exe files located in bin folders and replace with a malicious file that would...

8.4AI score0.01318EPSS
SaveExploits0References3
CVE
CVE
added 2021/10/26 1:23 p.m.114 views

CVE-2021-37364

OpenClinic GA 5.194.18 is affected by Insecure Permissions. By default the Authenticated Users group has modify permission to openclinic folders/files, enabling a low-privilege account to rename binaries (mysqld.exe or tomcat8.exe) in bin folders and substitute a malicious file that connects back...

9.3CVSS8.2AI score0.01318EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/10/26 1:20 p.m.34 views

CVE-2021-37363

An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.exe file located in bin folder and replace with a malicious file that would connect back to an attacking computer giving system level privileges nt authority\system due to the...

8.4AI score0.01618EPSS
SaveExploits1References2
CVE
CVE
added 2021/10/26 1:20 p.m.74 views

CVE-2021-37363

CVE-2021-37363 affects Gestionale Open 11.00.00. The vulnerability is described as an insecure permissions issue where a low-privilege account can rename the mysqld.exe in the bin folder and replace it with a malicious file that can connect back to an attacker, gaining system-level privileges bec...

9.3CVSS8.2AI score0.01618EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/10/18 5:15 p.m.11 views

CVE-2021-42055

ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker...

6.8CVSS6.7AI score0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/18 5:15 p.m.24 views

CVE-2021-42055

ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker...

6.8CVSS0.00255EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/18 5:15 p.m.16 views

Code injection

ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker...

4.6CVSS6.7AI score0.00255EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/18 5:15 p.m.6 views

CVE-2021-42055

ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker...

6.8CVSS6.7AI score0.00255EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/10/18 4:21 p.m.29 views

CVE-2021-42055

ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker...

6.8AI score0.00255EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2021/10/16 12:00 a.m.190 views

Trojan-Spy.Win32.Ardamax.ocx Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/78a39875a0adb110cf3c7de3a0d1384c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.Ardamax.ocx Vulnerability: Insecure Permissions Description: The malware creates an...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/10/05 12:00 a.m.269 views

Backdoor.Win32.LolBot.gen Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/56a93a2a0a4c6a09e2761f2e0351b020.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.LolBot.gen Vulnerability: Insecure Permissions Description: The malware creates an...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/10/05 12:00 a.m.305 views

Backdoor.Win32.Bifrose.ahyg Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d6aff119c03ff378d386b30b36b07a69.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Bifrose.ahyg Vulnerability: Insecure Permissions Description: The malware creates an...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/10/05 12:00 a.m.270 views

Virus.Win32.Renamer.a Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/001fc372acc853aa1cf92588a43a7deb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Renamer.a Vulnerability: Insecure Permissions Description: The malware creates an dir wi...

7.4AI score
SaveExploits0
OSV
OSV
added 2021/09/29 10:15 a.m.30 views

CVE-2021-33923

Insecure permissions in Confluent Ansible cp-ansible 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information private keys, state database...

5.5CVSS6.2AI score
SaveExploits0References2
NVD
NVD
added 2021/09/29 10:15 a.m.31 views

CVE-2021-33923

Insecure permissions in Confluent Ansible cp-ansible 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information private keys, state database...

5.5CVSS0.00296EPSS
SaveExploits0References2
Rows per page
Query Builder