499 matches found
CVE-2021-21551
CVE-2021-21551 Dell Driver EoP CVE-2021-21551 Description Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. This exploit was tested o...
CVE-2026-107571
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...
CVE-2026-107571 Incorrect Default Permissions in hMailServer
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...
CVE-2026-107571
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are affected by incorrect default permissions in the Windows installer. If the product is installed in a folder inheriting permissions from a writable parent (such as the root of an NTFS volume), a local authenticated user can gain code e...
PT-2026-117457
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...
EUVD-2026-94976
Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...
CVE-2026-107573 Incorrect Default Permissions in hMailServer
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the...
CVE-2026-107573 Incorrect Default Permissions in hMailServer
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the...
EUVD-2026-94855
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the...
CVE-2026-107573
Progressive Robot hMailServer versions 6.0.0 through 6.3.5 on Windows suffer from incorrect default permissions in the installer. The installer creates data, log, temp, database, and event folders, along with the hMailServer.INI configuration file, using permissions inherited from the installatio...
CVE-2026-85488
Brocade ASCG versions prior to 3.5.0 are susceptible to a hardcoded credential exposure. A well-known Brocade default password is embedded within a script distributed to every customer. A local authenticated user with read access to the installation path can discover these credentials. If default...
CVE-2026-85488: Use of Hard-coded Credentials
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...
CVE-2026-61819
A flaw was found in pgpartman. A database user with partmanuser privileges can exploit a SQL injection vulnerability by crafting a malicious parent-table name. When the extension is configured to use pgjobmon, this crafted input is improperly processed during an exception, allowing the injection...
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...
PT-2026-89594
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
CVE-2026-63427: Authentication Bypass by Spoofing
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
CVE-2026-18994: Improper Export of Android Application Components
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
CVE-2026-82325
CVE-2026-82325 is a use-after-free vulnerability in the OpenVPN ovpn-dco-win driver, affecting versions 2.5.0 through 2.8.6 . A local authenticated user can trigger a system crash by sending crafted control messages to the driver. The CVSS 4.0 score is 6.8 (MEDIUM) , with a local attack vector, l...