CVE-2022-36093

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. By passing a template of the distribution wizard to the xpart template, user accounts can be created even when user registration is disabled. This also circumvents any email verification. Before versions 14.2...

Advantech WISE-PaaS/OTA Server Privilege Escalation

The vulnerability of the Advantech WISE-PaaS/OTA Server is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to increase their privileges by using a specially created file...

Django FILE_UPLOAD_DIRECTORY_PERMISSIONS Disclosure

The vulnerability of the Django web application development framework’s FILEUPLOADDIRECTORYPERMISSIONS implementation is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Intel Renesas Electronics USB 3.0 Driver Privilege Escalation

The vulnerability of the Intel Renesas Electronics USB 3.0 driver is related to incorrect default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...

Intel PROSet/Wireless WiFi Disclosure DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool is related to incorrect default access rights settings. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

Novell Netware 4.1/4.11 SP5B NDS Default Rights Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options in CX.EXE and...