Lucene search
+L

510 matches found

Vulnrichment
Vulnrichment
added 2025/01/23 5:36 p.m.18 views

CVE-2024-55930 Weak default folder permissions

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

6.7CVSS6.4AI score0.00287EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/23 5:36 p.m.55 views

CVE-2024-55930

CVE-2024-55930 affects Xerox Workplace Suite; root cause is weak default folder permissions that allow unauthorized access, modification, or deletion of files. Connected sources specify affected software as Xerox Workplace Suite and versions prior to 5.6.701.9. Mitigation guidance in PT-2025-3158...

9.8CVSS6.4AI score0.00287EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/23 12:0 a.m.8 views

Xerox Workplace Suite 安全漏洞

Xerox Workplace Suite is a powerful print management software from Xerox. A security vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which originates from weak default folder permissions...

6.7CVSS6.8AI score0.00287EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/23 12:0 a.m.8 views

PT-2025-3158

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description The issue concerns weak default folder permissions in the software, allowing unauthorized users to access, modify, or delete files. There is no information provided about the...

9.8CVSS5.2AI score0.00287EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2025/01/02 2:14 p.m.23 views

CVE-2024-49385

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

5.5CVSS0.00151EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 2:14 p.m.53 views

CVE-2024-49385

CVE-2024-49385 affects Acronis True Image (Windows) prior to build 41736. Root cause: insecure folder permissions allow unauthorized access to sensitive information. Impact: confidential data disclosure locally. Affected component: the software’s Windows folder permissions; exact vulnerable folde...

5.5CVSS6AI score0.00151EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 2:14 p.m.13 views

CVE-2024-49385

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

5.5CVSS6AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.6 views

Acronis True Image 安全漏洞

Acronis True Image is a well-known data backup and restore software from the Swiss company Acronis. The software can be used to create drive and disk images and can restore the image when a clean system is needed. A security vulnerability exists in versions prior to Acronis True Image build 41736...

5.5CVSS5.3AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.7 views

PT-2025-2831 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image Windows before build 41736 Description: Sensitive information disclosure is possible due to insecure folder permissions. This issue affects Acronis True Image on Windows. Recommendations: For Acronis True Image Windows befo...

5.5CVSS6.7AI score0.00151EPSS
SaveExploits0References6
OSV
OSV
added 2024/12/30 3:31 p.m.47 views

GHSA-2697-96MV-3GFM TeamPass does not properly check whether a folder is in a user's allowed folders list

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

5.3CVSS4.4AI score0.00334EPSS
SaveExploits0References5
NVD
NVD
added 2024/12/30 3:15 p.m.25 views

CVE-2024-50701

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

4.3CVSS0.00334EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/28 4:15 p.m.13 views

CVE-2024-11969

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

8.8CVSS0.00163EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/28 3:41 p.m.53 views

CVE-2024-11969

The NetCloud Exchange client for Windows v1.110.50 has an insecure file/folder permissions issue that grants full control to the Everyone group, enabling a local non-admin user to escalate privileges, potentially execute arbitrary code, and maintain persistence. No explicit remediation version is...

8.8CVSS8.9AI score0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/28 3:41 p.m.21 views

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

8.8CVSS0.00163EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/22 10:15 p.m.7 views

CVE-2024-7245

Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the targ...

7.8CVSS6.2AI score0.00209EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 1:15 p.m.6 views

CVE-2024-47783

A vulnerability has been identified in SIPORT All versions V3.4.0. The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated...

7.8CVSS7.2AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/17 10:15 a.m.18 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS0.00138EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/17 10:15 a.m.8 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS7.1AI score0.00138EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/17 9:49 a.m.55 views

CVE-2024-49389

CVE-2024-49389 affects Acronis Cyber Files (Windows) prior to build 9.0.0x24. The vulnerability stems from insecure folder permissions that enable local privilege escalation. Affected component is the file system/installation directory permissions which, when exploited, grant high integrity, conf...

7.8CVSS7.5AI score0.00138EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/17 9:49 a.m.13 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS7.2AI score0.00138EPSS
SaveExploits0References1
Rows per page
Query Builder