CWE-732

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on

Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Security" componen

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly

Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php a

Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permis

Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp"

Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correc

IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to im