1817 matches found
CVE-2025-1699
An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access...
CVE-2025-1699
An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access...
Unspecified Vulnerability in SAMSUNG Cloud for Galaxy Watch
SAMSUNG Cloud for Galaxy Watch is a data backup tool from Samsung South Korea. SAMSUNG Cloud for Galaxy Watch suffers from a security vulnerability that stems from improper default permissions, and no details of the vulnerability have been provided...
Motorola MotoSignature 安全漏洞
Motorola MotoSignature is a feature found in one of Motorola's mobile devices from Motorola, USA. A security vulnerability exists in Motorola MotoSignature that stems from improper default permissions, which could lead to unauthorized access...
CVE-2025-20984
Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch...
SAMSUNG Cloud for Galaxy Watch 安全漏洞
SAMSUNG Cloud for Galaxy Watch is a data backup tool from Samsung South Korea. SAMSUNG Cloud for Galaxy Watch suffers from a security vulnerability that stems from improper default permissions, and no details of the vulnerability have been provided...
CVE-2025-46355
Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker...
CVE-2025-46355
CVE-2025-46355 affects PC Time Tracer prior to 5.2. The issue is due to incorrect default permissions (CWE-276) that may allow a local authenticated attacker to execute arbitrary code with SYSTEM privileges on Windows where the product runs. Affected product/version: PC Time Tracer before 5.2. Im...
Improper file access permission settings in PC Time Tracer
Overview PC Time Tracer provided by Keiyo System Co., LTD contains a vulnerability listed below. Incorrect default permissions CWE-276 - CVE-2025-46355 Ruslan Sayfiev and Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...
Keiyo System PC Time Tracer 安全漏洞
Keiyo System PC Time Tracer is a time tracking software for any workflow from Keiyo System, Japan. A security vulnerability exists in Keiyo System PC Time Tracer versions prior to 5.2, which stems from improper default permissions that could cause a locally authenticated user to execute arbitrary...
CVE-2025-2502
An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges...
PT-2025-23313
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A privilege escalation issue exists due to a business logic flaw in SOAP admin services. This can be exploited when specific conditions are met, including accessibility of SOAP admin services ...
Lenovo PC Manager 安全漏洞
Lenovo PC Manager is a PC management software from Lenovo China. A security vulnerability exists in Lenovo PC Manager that stems from improper default permissions, which may result in elevated privileges...
SUSE CVE-2025-32802
Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions...
CVE-2024-22385
Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read and write specific files.This issue affects Hitachi Storage Provider for VMware vCenter: from 3.1.0 before 3.7.4...
CVE-2024-23974
Incorrect default permissions in some IntelR ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-22378
Incorrect default permissions in some Intel UniteR Client Extended Display Plugin software installers before version 1.1.352.157 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-26427
Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissions for noreply.properties set during package installation. No publicly available exploits are known...
CVE-2023-28739
Incorrect default permissions in some IntelR Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...