Lucene search
K

39 matches found

OSV
OSV
added 2026/03/02 7:16 p.m.1 views

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.9AI score
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-8192

Malware in sbrugna...

9.3CVSS7.7AI score0.00138EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-4601

Malicious code in bioql PyPI...

5.5CVSS6.6AI score0.00059EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-36740

Malicious code in bioql PyPI...

3.3CVSS4.4AI score0.00039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/05 5:27 a.m.2 views

CVE-2023-21471

Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission...

4CVSS6.7AI score0.00069EPSS
Exploits0References1
CVE
CVE
added 2025/09/03 5:17 a.m.12 views

CVE-2023-21471

CVE-2023-21471 affects Samsung SemClipboard on devices prior to the SMR Apr-2023 Release 1. The vulnerability is described as an improper access control that allows an attacker to read arbitrary files with system permissions. Public references indicate the issue is addressed by Samsung’s SMR Apr-...

4CVSS6.2AI score0.00069EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/03 5:17 a.m.1 views

CVE-2023-21471

Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission...

4CVSS6.2AI score0.00069EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.2 views

PT-2025-35664

Name of the Vulnerable Software and Affected Versions: SemClipboard versions prior to SMR Apr-2023 Release 1 Description: An improper access control issue exists in SemClipboard. This allows attackers to read arbitrary files with system permission. Recommendations: Update SemClipboard to SMR...

4CVSS6.3AI score0.00069EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 7:7 a.m.5 views

CVE-2024-43095

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS7AI score0.00042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:2 p.m.4 views

CVE-2022-33701

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is protected by system permission by sending braodcast intent...

3.3CVSS6.7AI score0.00039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:11 p.m.3 views

CVE-2020-11831

OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1...

10CVSS7.1AI score0.00358EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/22 12:22 p.m.3 views

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

5.5CVSS6.6AI score0.00059EPSS
Exploits0References3
NVD
NVD
added 2025/02/20 12:15 p.m.6 views

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

5.5CVSS0.00059EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/20 12:4 p.m.4 views

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

5.5CVSS5.4AI score0.00059EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/20 12:4 p.m.8 views

CVE-2025-21106

Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...

5.5CVSS0.00059EPSS
Exploits0References1
CVE
CVE
added 2025/02/20 12:4 p.m.47 views

CVE-2025-21106

Dell RecoverPoint for Virtual Machines (RPVM) 6.0.X is affected by a weak file system permissions vulnerability (CVE-2025-21106). The issue enables a low-privileged local attacker to access non-sensitive resources; no patch details are provided in the included documents. A temporary workaround fr...

5.5CVSS5.4AI score0.00059EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/01/21 11:15 p.m.12 views

CVE-2024-43095

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS0.00042EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/01/21 11:15 p.m.1 views

CVE-2024-43095

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.9AI score0.00042EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/21 11:4 p.m.7 views

CVE-2024-43095

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8AI score0.00042EPSS
Exploits0References1
OSV
OSV
added 2025/01/01 12:0 a.m.8 views

ASB-A-340480881

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS7.2AI score0.00042EPSS
Exploits0References2
Rows per page
Query Builder