47 matches found
CVE-2023-31068
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...
CVE-2023-31068
TSplus Remote Access up to 16.0.2.14 has overly permissive ACLs: Full Control for Everyone on directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes. CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8). Root cause is insecure directory permissions; no remediation details are provide...
CVE-2023-31068
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...
SUSE CVE-2013-4270
The netctlpermissions function in net/sysctlnet.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application...
CVE-2022-38980
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...
Heap overflow
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...
CVE-2022-38980
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...
CVE-2022-38980
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...
CVE-2022-38980
CVE-2022-38980 describes a heap overflow in the Huawei HarmonyOS HwAirlink module when processing data packets of its proprietary protocol. The vulnerability could allow an attacker to obtain process control permissions, as indicated by the provided descriptions. The available connected documents...
SOYAL 701 Server 9.0.1 - Insecure Permissions Vulnerability
Exploit Title: SOYAL 701 Server 9.0.1 - Insecure Permissions Exploit Author: LiquidWorm Vendor Homepage: https://www.soyal.com.tw https://www.soyal.com Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: 9.0.1 190322 8.0.6 181227...
CVE-2020-36154
The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application...
CVE-2020-36154
The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application...
GaussDB Kernel: Using the Private User Solution
If the control permissions of system administrators for tables need to be isolated from their access permissions, that is, administrators can only perform control operations DROP, ALTER, and TRUNCATE on data and cannot perform access operations INSERT, DELETE, UPDATE, SELECT, and COPY, the privat...
CVE-2020-4631
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...
File Upload Vulnerability in LeShangShang Mall Open Source System
Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...
File Upload Vulnerability in LeShangShang Mall Open Source System
Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...
DEBIAN-CVE-2017-11353
yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...
Full Control Permissions Granted to All Users in Profile Management
The Full Control permission has been granted to each user. For example, when a new user is created in Active Directory and logs on for the first time, a folder is created for that user in the user store. However, all users have permission to access that folder and perform operations on it...
AIX 7.1 : bos.mp64 (U854839)
The remote host is missing AIX PTF U854839, which is related to the security of the package bos.mp64. The root owned files can be read by non-root users only when the directory permissions are set allowed for non-root users. For example, a non-root user won't be able to read anything under...
