CWE-732

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maist

It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3,

A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an i

A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification

A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulne

IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially

The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory

Dell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment vulnerability. A malicious local

Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escala

Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escala

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on t

An issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2. Uploaded files associated with un

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current vers

An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and oth

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise (VSE) prior to 8.8 Pa

Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allow

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured F

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from P

Azure Sphere Information Disclosure Vulnerability

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-584

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other tha

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other th

A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable inf

In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. A

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0

An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database

In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/gra

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned acce

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the

In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error. This could lea

The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.

An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block C

Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4

Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cooki

Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.

IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obta

An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, th

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRe

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to add DEBUG lines to t

An issue was discovered in Mattermost Server before 3.5.1. E-mail address verification can be bypassed.

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. API endpoint access control does not honor

IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain sensitive information, caused by the fa

In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the a

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A Syst

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A Syst