Skip to content
Noroxi

CWE-275 · 100 records

Permission Issues

CVEs in this class

100 records

  • CVE-2018-15379
    65This week

    Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 86%

    cisco · prime infrastructureOct 5, 2018

  • CVE-2017-16887
    50Plan

    The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    fiberhome · lm53q1 firmwareJan 12, 2018

  • CVE-2017-6513
    39Monitor

    The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authent

    CriticalCVSS 9.9No exploitEPSS 1%

    softaculous · whmcs reseller moduleMar 11, 2017

  • CVE-2017-17060
    39Monitor

    OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.

    CriticalCVSS 9.8No exploitEPSS 1%

    open-xchange · open-xchange appsuiteMay 23, 2019

  • CVE-2023-3759
    39Monitor

    Intergard SGS permission

    CriticalCVSS 9.8No exploitEPSS 0%

    intergard · smartgard silver with matrix keyboardJul 19, 2023

  • CVE-2020-14496
    39Monitor

    Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

    CriticalCVSS 9.8No exploitEPSS 0%

    mitsubishielectric · cpu module logging configuration toolMay 19, 2022

  • CVE-2017-11463
    36Monitor

    In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads

    HighCVSS 8.8No exploitEPSS 2%

    ivanti · endpoint managerDec 11, 2017

  • CVE-2022-22988
    36Monitor

    Insecure file and directory permissions on EdgeRover

    CriticalCVSS 9.1No exploitEPSS 0%

    westerndigital · edgeroverJan 13, 2022

  • CVE-2023-39399
    36Monitor

    Parameter verification vulnerability in the installd module.

    CriticalCVSS 9.1No exploitEPSS 0%

    huawei · emuiAug 13, 2023

  • CVE-2023-39398
    36Monitor

    Parameter verification vulnerability in the installd module.

    CriticalCVSS 9.1No exploitEPSS 0%

    huawei · emuiAug 13, 2023

  • CVE-2014-1632
    35Monitor

    htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

    HighCVSS 8.1Proof of conceptEPSS 10%

    eventum project · eventumJan 31, 2018

  • CVE-2016-8520
    35Monitor

    HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs.

    HighCVSS 8.8No exploitEPSS 1%

    eucalyptus · eucalyptusFeb 15, 2018

  • CVE-2015-5153
    35Monitor

    Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted objec

    HighCVSS 8.8No exploitEPSS 1%

    pulp project · pulpAug 18, 2017

  • CVE-2019-2177
    35Monitor

    In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions by

    HighCVSS 8.8No exploitEPSS 0%

    google · androidSep 5, 2019

  • CVE-2024-3118
    35Monitor

    Dreamer CMS Attachment permission

    HighCVSS 8.8No exploitEPSS 0%

    iteachyou · dreamer cmsMar 31, 2024

  • CVE-2023-5263
    35Monitor

    ZZZCMS Database Backup File save.php restore permission

    HighCVSS 8.8No exploitEPSS 0%

    zzzcms · zzzcmsSep 29, 2023

  • CVE-2017-17876
    33Monitor

    Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request

    HighCVSS 7.5Proof of conceptEPSS 9%

    iwcnetwork · shiftDec 27, 2017

  • CVE-2014-1631
    33Monitor

    Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

    HighCVSS 7.5Proof of conceptEPSS 9%

    eventum project · eventumJan 31, 2018

  • CVE-2016-4288
    33Monitor

    A local privilege escalation vulnerability exists in BlueStacks App Player.

    HighCVSS 8.4No exploitEPSS 0%

    bluestacks · bluestacksJan 6, 2017

  • CVE-2015-7781
    32Monitor

    ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.

    HighCVSS 7.5No exploitEPSS 7%

    zohocorp · manageengine firewall analyzerJun 27, 2017

  • CVE-2022-0742
    32Monitor

    Memory leak in ICMP6 in Linux Kernel

    HighCVSS 7.5No exploitEPSS 5%

    linux · linux kernelMar 18, 2022

  • CVE-2016-10846
    32Monitor

    cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

    HighCVSS 8.1No exploitEPSS 1%

    cpanel · cpanelAug 1, 2019

  • CVE-2017-1396
    32Monitor

    IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that

    HighCVSS 8.1No exploitEPSS 0%

    ibm · security identity governance and intelligenceAug 6, 2018

  • CVE-2016-8856
    31Monitor

    Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file

    HighCVSS 7.8No exploitEPSS 0%

    foxitsoftware · readerOct 31, 2016

  • CVE-2016-8732
    31Monitor

    Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303.

    HighCVSS 7.8No exploitEPSS 0%

    sophos · invincea dell protected workspaceApr 24, 2018

All vulnerability classes