Lucene search
+L

599 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/23 12:00 a.m.•3 views

CVE-2024-55930: Incorrect Default Permissions

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

9.8CVSS6.7AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/23 12:00 a.m.•20 views

Xerox Workplace Suite 安全漏洞

Xerox Workplace Suite is a powerful print management software from Xerox. A security vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which originates from weak default folder permissions...

6.7CVSS6.7AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/23 12:00 a.m.•21 views

PT-2025-3158

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description The issue concerns weak default folder permissions in the software, allowing unauthorized users to access, modify, or delete files. There is no information provided about the...

9.8CVSS6.6AI score0.00293EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2025/01/02 2:14 p.m.•36 views

CVE-2024-49385

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

5.5CVSS6AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 2:14 p.m.•34 views

CVE-2024-49385

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

5.5CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/02 2:14 p.m.•66 views

CVE-2024-49385

CVE-2024-49385 affects Acronis True Image (Windows) prior to build 41736. Root cause: insecure folder permissions allow unauthorized access to sensitive information. Impact: confidential data disclosure locally. Affected component: the software’s Windows folder permissions; exact vulnerable folde...

5.5CVSS6AI score0.00149EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•2 views

CVE-2024-49385: Incorrect Permission Assignment for Critical Resource

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

5.5CVSS5.8AI score0.00149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•17 views

PT-2025-2831 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image Windows before build 41736 Description: Sensitive information disclosure is possible due to insecure folder permissions. This issue affects Acronis True Image on Windows. Recommendations: For Acronis True Image Windows befo...

5.5CVSS6.7AI score0.00149EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•11 views

Acronis True Image 安全漏洞

Acronis True Image is a well-known data backup and restore software from the Swiss company Acronis. The software can be used to create drive and disk images and can restore the image when a clean system is needed. A security vulnerability exists in versions prior to Acronis True Image build 41736...

5.5CVSS5.3AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/30 3:31 p.m.•59 views

GHSA-2697-96MV-3GFM TeamPass does not properly check whether a folder is in a user's allowed folders list

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

5.3CVSS4.4AI score0.00343EPSS
SaveExploits0References5
NVD
NVD
•added 2024/12/30 3:15 p.m.•32 views

CVE-2024-50701

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

4.3CVSS0.00343EPSS
SaveExploits0References3
Acronis
Acronis
•added 2024/12/16 11:00 a.m.•13 views

Sensitive information disclosure due to insecure folder permissions

...

5.5CVSS5.2AI score0.00149EPSS
SaveExploits0References1Affected Software2
NVD
NVD
•added 2024/11/28 4:15 p.m.•21 views

CVE-2024-11969

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

8.8CVSS0.00163EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/28 3:41 p.m.•66 views

CVE-2024-11969

The NetCloud Exchange client for Windows v1.110.50 has an insecure file/folder permissions issue that grants full control to the Everyone group, enabling a local non-admin user to escalate privileges, potentially execute arbitrary code, and maintain persistence. No explicit remediation version is...

8.8CVSS8.9AI score0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/28 3:41 p.m.•33 views

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

8.8CVSS0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/22 10:15 p.m.•15 views

CVE-2024-7245

Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the targ...

7.8CVSS6.2AI score0.00208EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/12 1:15 p.m.•13 views

CVE-2024-47783

A vulnerability has been identified in SIPORT All versions V3.4.0. The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated...

7.8CVSS7.2AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/17 10:15 a.m.•28 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS0.00138EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/17 10:15 a.m.•18 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS7.1AI score0.00138EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/17 9:49 a.m.•36 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS0.00138EPSS
SaveExploits0References1
Rows per page
Query Builder