İçeriğe atla
Noroxi

CWE-275 · 100 kayıt

Permission Issues

Bu sınıftaki CVE’ler

100 kayıt

  • CVE-2018-15379
    65Bu hafta

    Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %86

    cisco · prime infrastructure5 Eki 2018

  • CVE-2017-16887
    50Planlayın

    The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    fiberhome · lm53q1 firmware12 Oca 2018

  • CVE-2017-6513
    39İzleyin

    The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authent

    KritikCVSS 9,9İstismar yokEPSS %1

    softaculous · whmcs reseller module11 Mar 2017

  • CVE-2017-17060
    39İzleyin

    OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.

    KritikCVSS 9,8İstismar yokEPSS %1

    open-xchange · open-xchange appsuite23 May 2019

  • CVE-2023-3759
    39İzleyin

    Intergard SGS permission

    KritikCVSS 9,8İstismar yokEPSS %0

    intergard · smartgard silver with matrix keyboard19 Tem 2023

  • CVE-2020-14496
    39İzleyin

    Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

    KritikCVSS 9,8İstismar yokEPSS %0

    mitsubishielectric · cpu module logging configuration tool19 May 2022

  • CVE-2017-11463
    36İzleyin

    In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads

    YüksekCVSS 8,8İstismar yokEPSS %2

    ivanti · endpoint manager11 Ara 2017

  • CVE-2022-22988
    36İzleyin

    Insecure file and directory permissions on EdgeRover

    KritikCVSS 9,1İstismar yokEPSS %0

    westerndigital · edgerover13 Oca 2022

  • CVE-2023-39399
    36İzleyin

    Parameter verification vulnerability in the installd module.

    KritikCVSS 9,1İstismar yokEPSS %0

    huawei · emui13 Ağu 2023

  • CVE-2023-39398
    36İzleyin

    Parameter verification vulnerability in the installd module.

    KritikCVSS 9,1İstismar yokEPSS %0

    huawei · emui13 Ağu 2023

  • CVE-2014-1632
    35İzleyin

    htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

    YüksekCVSS 8,1Kavram kanıtıEPSS %10

    eventum project · eventum31 Oca 2018

  • CVE-2016-8520
    35İzleyin

    HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs.

    YüksekCVSS 8,8İstismar yokEPSS %1

    eucalyptus · eucalyptus15 Şub 2018

  • CVE-2015-5153
    35İzleyin

    Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted objec

    YüksekCVSS 8,8İstismar yokEPSS %1

    pulp project · pulp18 Ağu 2017

  • CVE-2019-2177
    35İzleyin

    In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions by

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · android5 Eyl 2019

  • CVE-2024-3118
    35İzleyin

    Dreamer CMS Attachment permission

    YüksekCVSS 8,8İstismar yokEPSS %0

    iteachyou · dreamer cms31 Mar 2024

  • CVE-2023-5263
    35İzleyin

    ZZZCMS Database Backup File save.php restore permission

    YüksekCVSS 8,8İstismar yokEPSS %0

    zzzcms · zzzcms29 Eyl 2023

  • CVE-2017-17876
    33İzleyin

    Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request

    YüksekCVSS 7,5Kavram kanıtıEPSS %9

    iwcnetwork · shift27 Ara 2017

  • CVE-2014-1631
    33İzleyin

    Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %9

    eventum project · eventum31 Oca 2018

  • CVE-2016-4288
    33İzleyin

    A local privilege escalation vulnerability exists in BlueStacks App Player.

    YüksekCVSS 8,4İstismar yokEPSS %0

    bluestacks · bluestacks6 Oca 2017

  • CVE-2015-7781
    32İzleyin

    ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.

    YüksekCVSS 7,5İstismar yokEPSS %7

    zohocorp · manageengine firewall analyzer27 Haz 2017

  • CVE-2022-0742
    32İzleyin

    Memory leak in ICMP6 in Linux Kernel

    YüksekCVSS 7,5İstismar yokEPSS %5

    linux · linux kernel18 Mar 2022

  • CVE-2016-10846
    32İzleyin

    cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

    YüksekCVSS 8,1İstismar yokEPSS %1

    cpanel · cpanel1 Ağu 2019

  • CVE-2017-1396
    32İzleyin

    IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · security identity governance and intelligence6 Ağu 2018

  • CVE-2016-8856
    31İzleyin

    Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file

    YüksekCVSS 7,8İstismar yokEPSS %0

    foxitsoftware · reader31 Eki 2016

  • CVE-2016-8732
    31İzleyin

    Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303.

    YüksekCVSS 7,8İstismar yokEPSS %0

    sophos · invincea dell protected workspace24 Nis 2018

Tüm zafiyet sınıfları