Broadcom Automic Automation Agent 安全漏洞

Broadcom Automic Automation Agent is a proxy program developed by Broadcom Corporation in the United States. It serves as an automation agent for enterprise-level tasks, supporting cross-platform job scheduling, process orchestration, and IT operations automation. It is suitable for automated...

Dell PowerScale InsightIQ 安全漏洞

Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool developed by the American company Dell. Versions 5.0.0 to 6.2.0 of Dell PowerScale InsightIQ contain security vulnerabilities. These vulnerabilities stem from issues with unnecessary permission executions, which cou...

Dell Alienware Command Center 安全漏洞

Dell Alienware Command Center is a software package manager developed by the American company Dell. Versions of the Dell Alienware Command Center prior to 6.13.8.0 contained security vulnerabilities; these vulnerabilities were due to unnecessary permission executions, which could lead to privileg...

EUVD-2019-11013

Malware in sbrugna...

EUVD-2001-0484

Malware in sbrugna...

EUVD-2024-43790

Malicious code in bioql PyPI...

CVE-2019-20468

An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READEXTERNALSTORAGE, WRITEEXTERNALSTORAGE, and READCONTACTS...

CVE-2024-49804

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user to escalate their privileges due to unnecessary permissions used to perform certain tasks...

IBM Security Verify Access Docker 安全漏洞

IBM Security Verify Access Docker is a service from International Business Machines IBM that can be used to configure a Security Verify Access environment for Docker. A security vulnerability exists in IBM Security Verify Access Docker versions 10.0.0 through 10.0.6, which stems from a...

CVE-2024-49804

CVE-2024-49804 affects IBM Security Verify Access Appliance versions 10.0.0–10.0.8. The vulnerability allows a locally authenticated non-administrative user to escalate privileges due to unnecessary permissions used to perform certain tasks. Affected product/version details are corroborated by mu...

PT-2024-33689 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8 Description: The issue could allow a locally authenticated non-administrative user to escalate their privileges due to unnecessary permissions used to perform certain tasks...

IBM Security Verify Access Security Vulnerability

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies by using risk-based access, single sign-on, integrated access...

CVE-2023-42501

Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and annotations. This issue affects Apache Superset: before 2.1.2. Users should upgrade to version or above 2.1.2 and run superset init to reconstruct the Gamma role or remove canre...

Design/Logic Flaw

Proofpoint Enterprise Protection PPS/PoD contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below...

CVE-2022-46334 Proofpoint Enterprise Protection Local Privilege Escalation

Proofpoint Enterprise Protection PPS/PoD contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below...

Design/Logic Flaw

An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READEXTERNALSTORAGE, WRITEEXTERNALSTORAGE, and READCONTACTS...

CVE-2019-20468

An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READEXTERNALSTORAGE, WRITEEXTERNALSTORAGE, and READCONTACTS...

CVE-2019-20468

The CVE-2019-20468 entry applies to SeTracker2 for TK-Star Q90 Junior GPS watch, version 3.1042.9.8656. Affected component/behavior: the software requests unnecessary permissions (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, READ_CONTACTS), enabling access to local data and contacts. Root cause...

CVE-2019-20468

An issue was discovered in SeTracker2 for TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It has unnecessary permissions such as READEXTERNALSTORAGE, WRITEEXTERNALSTORAGE, and READCONTACTS...

Viral FaceApp Unnecessarily Requests Access to Users' Facebook Friends List

FaceApp—the AI-powered photo-morphing app that recently gone viral for its age filter but hit the headlines for its controversial privacy policy—has been found collecting the list of your Facebook friends for no reason. The Russian-made FaceApp has been around since the spring of 2017 but taken...