CWE-276

A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to ca

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7,

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3. A malicious applicat

The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application

Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 1

Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access so

The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure.

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and

In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the defau

In JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API without appropriate permiss

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker wa

Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00

Access bypass vulnerability in of Drupal Core Workspaces allows an attacker to access data without correct permissions.

There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerabi

Nagios XI before version 5.8.5 is vulnerable to insecure permissions and allows unauthenticated users to access guarded

There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabil

In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us

Apache Guacamole 1.2.0 and earlier do not consistently restrict access to connection history based on user visibility. I

The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permi

The Layout module in Liferay Portal 7.1.0 through 7.3.1, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack

The Portlet Configuration module in Liferay Portal 7.2.0 through 7.3.3, and Liferay DXP 7.0 fix pack pack 93 and 94, 7.1

The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, and Liferay DXP 7.0 before fix pack 94, 7.1 befor

The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

Dell EMC PowerStore versions prior to 1.0.3.0.5.xxx contain a file permission Vulnerability. A locally authenticated att

A vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1 allows local attackers to ac

An improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP information without prope

Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a re

Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affec

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ versio

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, def

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE

Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (

A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions startin

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The defau

The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (cr

GitLab EE 8.9 and later through 12.7.2 has Insecure Permission

Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Per

An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software. The Fire

eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSO

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS

Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker mi

MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop us

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convin

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convin