CWE-732

An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system

A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A m

In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restricti

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecif

The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If an attacker runs script

An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over

An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privilege

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permiss

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not prope

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x befo

IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (ID

A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permiss

The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on t

Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.

Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may all

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker t

A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to ga

A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could all

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege esc

An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in th

KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any

Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, vers

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install dir

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” dir

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mod

Improper directory permissions in installer for Intel(R) Media SDK before 2018 R2.1 may allow an authenticated user to p

A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorr

Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier ma

Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.

Improper directory permissions in Intel(R) ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to

Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to pote

IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute co

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_0

Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0

Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity,

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the Ja

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDR

In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID

A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS could allow an authenti

3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation direc

Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folde

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure per

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result,

extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local use

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c

A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac c

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default install