CVE-2024-8401

CWE-79: Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability exists when an authenticated attacker modifies folder names within the context of the product...

Local privilege escalation due to insecure folder permissions

...

January 28, 2025—KB5050094 (OS Build 26100.3037) Preview

None None...

Acronis Snap Deploy security vulnerabilities

Acronis Snap Deploy is a platform for batch deployment of system images from Acronis Switzerland. A security vulnerability exists in Acronis Snap Deploy that stems from a local elevation of privilege due to insecure folder permissions...

CVE-2024-8401: Improper Neutralization of Input During Web Page Generation

CWE-79: Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ vulnerability exists when an authenticated attacker modifies folder names within the context of the product...

CVE-2025-24826: Incorrect Default Permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...

PT-2025-5581 · Acronis · Acronis Snap Deploy

Name of the Vulnerable Software and Affected Versions: Acronis Snap Deploy Windows versions before build 4625 Description: The issue is related to local privilege escalation due to insecure folder permissions. This allows for potential exploitation, though specific details about the estimated...

CVE-2025-0720

A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer...

CVE-2025-0720 Microword eScan Antivirus Folder Watch List rtscanner removeExtraSlashes stack-based overflow

A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer...

PT-2025-4020

Name of the Vulnerable Software and Affected Versions Microword eScan Antivirus version 7.0.32 Description A problematic issue has been found, affecting the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner in the component Folder Watch List Handler. This issue leads to a...

eScan Antivirus security vulnerabilities

eScan Antivirus is a network anti-virus security software from eScan. A security vulnerability exists in eScan Antivirus version 7.0.32, which originates in the Folder Watch List Handler component, where the removeExtraSlashes function causes a stack buffer overflow...

CVE-2025-0720: Stack-based Buffer Overflow

A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer...

CVE-2024-55930

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

CVE-2024-55930 Weak default folder permissions

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

CVE-2024-55930 Weak default folder permissions

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

CVE-2024-55930

CVE-2024-55930 affects Xerox Workplace Suite; root cause is weak default folder permissions that allow unauthorized access, modification, or deletion of files. Connected sources specify affected software as Xerox Workplace Suite and versions prior to 5.6.701.9. Mitigation guidance in PT-2025-3158...

Xerox Workplace Suite security vulnerabilities

Xerox Workplace Suite is a powerful print management software from Xerox. A security vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which originates from weak default folder permissions...

PT-2025-3158

Name of the Vulnerable Software and Affected Versions Xerox Workplace Suite versions prior to 5.6.701.9 Description The issue concerns weak default folder permissions in the software, allowing unauthorized users to access, modify, or delete files. There is no information provided about the...

CVE-2024-55930: Incorrect Default Permissions

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files...

CVE-2025-24401

Jenkins Folder-based Authorization Strategy Plugin 217.vd5b18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted typically optional permissions, like Overall/Manage to access functionality they're no longer entitle...