Input validation

Improper permissions in the installer for the IntelR Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to the improper permissions, with the 'F' flag...

Adobe Photoshop 安全漏洞

Adobe Photoshop Elements is Adobe's new image editing, photo retouching and Web graphics solution following Photoshop. An elevation of privilege vulnerability exists in Adobe Photoshop Elements 5.2 and earlier versions. The vulnerability stems from the creation of temporary files in a directory...

CVE-2021-28271

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

Privilege escalation

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

SUSE: Security Advisory (SUSE-SU-2020:1789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1788-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-25362

An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files...

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations, related to the improper assignment of permissions for critical resources, allows attackers to gain access to confidential data.

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the update function in FlexConnect microprogramming software for Cisco Aironet Access Points allows a intruder to disclose protected information.

The vulnerability of the update function in FlexConnect microprogramming software for Cisco Aironet Access Points is related to improper handling of permissions. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by sending TFTP requests to the vulnerable...

CVE-2021-22311

There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include...

CVE-2021-22311

There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include...

SOYAL 701Client 9.0.1 Insecure Permissions

Summary 701 Client is the user interface software for the access control system. It is used for adding and deleting tokens, setting door groups for access, setting time zones for limiting access and monitoring ingress and egress on a live system, among other things. Description The application...

SOYAL 701Server 9.0.1 Insecure Permissions

Summary 701 Server is the program used to set up and configure LAN and IP based access control systems, from the COM port used to the quantity and type of controllers connected. It is also used for programming some of the more complex controllers such as the AR-716E and the AR-829E. Description T...

CVE-2020-12353

Improper permissions in the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2020-12330

Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12346

Intel Battery Life Diagnostic Tool pre-1.0.7 contains an elevation of privilege due to improper installer permissions. Local access with authenticated user could escalate privileges. CVSS v3.1 base score 7.8 (HIGH). Affected: Intel Battery Life Diagnostic Tool before version 1.0.7. Mitigation: up...

CVE-2020-12346

Improper permissions in the installer for the IntelR Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12353

The CVE-2020-12353 issue affects Intel Data Center Manager Console prior to 3.6.2. The root cause is improper permissions (privilege misconfig) in the Console, which could allow an authenticated user to enable a denial of service via network access. Impact is a partial availability degradation. R...

CVE-2020-12335

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...