CVE-2022-36093

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. By passing a template of the distribution wizard to the xpart template, user accounts can be created even when user registration is disabled. This also circumvents any email verification. Before versions 14.2...

The vulnerability of the Advantech WISE-PaaS/OTA Server lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech WISE-PaaS/OTA Server is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to increase their privileges by using a specially created file...

The vulnerability in the implementation of the FILE_UPLOAD_DIRECTORY_PERMISSIONS mode of the Django software platform allows a perpetrator to disclose protected information.

The vulnerability of the Django web application development framework’s FILEUPLOADDIRECTORYPERMISSIONS implementation is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Intel Renesas Electronics USB 3.0 driver lies in improper default access rights settings, allowing attackers to exploit their privileges.

The vulnerability of the Intel Renesas Electronics USB 3.0 driver is related to incorrect default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility arises from incorrect default access rights settings, allowing a malicious actor to disclose protected information or cause service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool is related to incorrect default access rights settings. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

Novell Netware 4.1/4.11 SP5B NDS Default Rights Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options in CX.EXE and...