80 matches found
PT-2022-2568 · Fanuc · Fanuc Roboguide
Name of the Vulnerable Software and Affected Versions: FANUC ROBOGUIDE affected versions not specified Description: The issue is related to errors in assigning permissions for files, which can allow an attacker to gain privilege escalation. It is also associated with misconfigured binaries,...
ColdFusion Privilege Escalation
The vulnerability of the ColdFusion software platform is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2021-32526
Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document...
PackageKit Privilege Escalation
The vulnerability of the PackageKit package for Mac OS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
Cisco Data Center Network Manager Permission Bypass Info Disclosure
The vulnerability of the Cisco Data Center Network Manager system is related to errors in permission processing. Exploiting this vulnerability can allow an attacker to gain access to protected information...
TwinCAT Privilege Escalation
The vulnerability of the default installation configuration of TwinCAT software for automation and process control systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...
Windows Setup Privilege Exploitation
The vulnerability of the Windows Setup application’s installation service is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
SoMove Privilege Escalation
The vulnerability of software for configuring devices and monitoring SoMove metrics is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges...
OpenStack Manila Unauthorized Access
The vulnerability of the openstack-manila software for general access to files is related to errors in the use of standard permissions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to common files, provided that the value of the UUID...
Firefox Confidential Data Access
The vulnerability of Firefox browsers is related to errors in permission settings. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...
libzypp Unauthenticated Information Disclosure
The vulnerability of the libzypp library in SUSE CaaS Platform and SUSE Linux Enterprise Server software is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information...
baseURI component Data Compromise
The vulnerability of the baseURI component in browsers such as Firefox ESR, Firefox, and the email client Thunderbird is related to permission handling errors. Exploiting this vulnerability can allow a malicious actor to influence the integrity of protected information from a remote location...
Cisco Data Center Network Manager Unauthorized Access
The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to errors in permission processing. Exploiting this vulnerability could allow a malicious actor to gain access to the protected files of the vulnerable device remotely...
Target Credential Issues by Authentication Protocol - No Issues Found
Valid credentials were provided for an authentication protocol on the remote target and Nessus did not log any subsequent errors or failures for the authentication protocol. When possible, Nessus tracks errors or failures related to otherwise valid credentials in order to highlight issues that ma...
CVE-2016-10086
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...
Users getting "XSRF Security Token Missing" when Creating Issues
When trying to use our JIRA instance we keep getting lots of permissions errors which makes JIRA very difficult to use. If we keep trying then eventually it works. This has been happening for about the last week or so. It's very annoying as you keep having to enter the issues of the JIRA you're...
Users getting "XSRF Security Token Missing" when Creating Issues
When trying to use our JIRA instance we keep getting lots of permissions errors which makes JIRA very difficult to use. If we keep trying then eventually it works. This has been happening for about the last week or so. It's very annoying as you keep having to enter the issues of the JIRA you're...
Moderate: Red Hat Security Advisory: openstack-swift security and bug fix update
Updated openstack-swift packages that fix one security issue and one bug are now available for Red Hat OpenStack 3.0 Grizzly Preview. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
[CVE-REQUEST] Plone XSS and permission errors
Hello all, As a member of the Plone security response team I hereby notify you that we have been made aware of three distinct security holes in Plone and are requesting CVE identifiers. 1. Reflected XSS attack A crafted URL can display arbitrary HTML output 2. Persistent XSS attack Certain valid...
Dovecot mail_extra_groups setting is often used insecurely
mailextragroups=mail setting is often used insecurely to give Dovecot access to create dotlocks to /var/mail directory. If you don't use mboxes in /var/mail, make sure this setting is cleared. If you do use /var/mail mboxes and Dovecot gives permission errors without it, do one of the following i...