170 matches found
CVE-2026-107029
A flaw was found in Pile. Due to insecure permission settings, an unauthorized attacker can invoke an exported application component. This vulnerability allows an attacker to access and overwrite arbitrary application data...
Matthias Klass and FHEM security vulnerabilities
A security vulnerability exists in Matthias Klass’s FHEM version 2.4.1. This vulnerability stems from improper permission settings and may allow unauthorized attackers to freely modify other users’ FHEM home automation configurations...
Ghost Commander File Manager security vulnerability
Version 479 of Ghost Commander File Manager contains a security vulnerability stemming from improper permission settings. This vulnerability may allow unauthorized attackers to read and write files in the Commander’s private storage at will...
CodeCatcher security vulnerability
Version 131 of CodeCatcher contains a security vulnerability stemming from improper permission settings. This vulnerability may allow unauthorized attackers to manipulate the application’s SMS verification code capture mechanism at will...
Gabriel Fair Share 2 Archive Today security vulnerability
Gabriel Fair Share 2 Archive Today has a security vulnerability stemming from improper permission settings. Unauthorized attackers can exploit this flaw by providing a specially crafted URL to override another user’s clipboard contents at will...
Mikhail Basov OMN-Go security vulnerability
Mikhail Basov’s OMN-Go has a security vulnerability stemming from insecure permission settings. This allows unauthorized attackers to invoke exported components, potentially leading to arbitrary data access and control over data flows...
Michael Butscher WikiAndPad security vulnerability
The Michael Butscher WikiAndPad has a security vulnerability stemming from improper permission settings, which may allow unauthorized attackers to export application data...
Fossify Contacts security vulnerability
Version 1.3.0 of Fossify Contacts contains a security vulnerability stemming from insecure permission settings. This vulnerability may allow unauthorized attackers to access and read contact information stored by other users...
MirakelX Mirakel security vulnerability
MirakelX Mirakel has a security vulnerability stemming from improper permission settings in the MirakelInternalContentProvider component. This vulnerability may allow unauthorized attackers to read and modify other users’ task databases at will...
Tobias Kollnig TrackerControl security vulnerability
A security vulnerability exists in Tobias Kollnig’s TrackerControl. This vulnerability stems from improper permission settings and may allow unauthorized attackers to invoke exported components, thereby affecting the application’s tracker interception mechanisms...
Rubenalfon Pile security vulnerability
Version 1.1.3 of Rubenalfon Pile contains a security vulnerability stemming from insecure permission settings. This allows unauthorized attackers to invoke exported components, resulting in arbitrary data access and overwriting...
Ivan Ivanenko Librera Reader security vulnerability
The Librera Reader version 7222 by Ivan Ivanenko contains a security vulnerability stemming from improper permission settings. This vulnerability may allow unauthorized attackers to write and truncate files within shared storage space outside the sandbox...
Tobe yaacc security vulnerability
Version 50200 of Tobe yaacc contains a security vulnerability stemming from improper permission settings. This allows unauthorized attackers to invoke exported components, potentially leading to arbitrary data access and control over application data...
kvf-admin security vulnerabilities
kvf-admin is a set of rapid development frameworks, scaffolding, backend management systems, and permission systems developed by KalvinGit’s individual developers. Version 1.1.0 of kvf-admin contains a security vulnerability. This vulnerability stems from improper permission settings in the...
CVE-2026-39454
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may b...
Mattermost security vulnerabilities
Mattermost is an open-source collaboration platform developed by the American company Mattermost. There is a security vulnerability in Mattermost, which stems from the lack of permission settings for downloaded batch export files, potentially allowing other local users to read their contents. The...
CVE-2019-25245: Incorrect Permission Assignment for Critical Resource
Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a...
EUVD-2021-21045
Malware in sbrugna...