Overview 26 matches · 3 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
3
11.5%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
23
88.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
26
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
26
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 5 / year
19991
Not applicable1
Critical1
not blocked1
Working exploit published1
20000
20010
20020
20030
20040
20050
20061
Not applicable1
High1
not blocked1
Working exploit published1
20070
20080
20090
20100
20110
20120
20130
20140
20151
Not applicable1
High1
not blocked1
Working exploit published1
20163
Mitigation candidate1
Not applicable2
High3
not blocked3
Working exploit published3
20173
Not applicable3
High3
not blocked3
Working exploit published3
20181
Mitigation candidate1
Medium1
not blocked1
Working exploit published1
20193
Not applicable3
Critical1
High2
not blocked3
Working exploit published3
20205
Not applicable5
Critical1
High3
Medium1
not blocked5
Working exploit published5
20213
Not applicable3
High3
not blocked3
Working exploit published3
20220
20235
Mitigation candidate1
Not applicable4
Critical3
High1
Medium1
not blocked5
Working exploit published5
1999200120032005200720092011201320152017201920212023
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-31468 | High | 2023-09-11 | Not applicable | Working exploit published | An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\INOSOFT GmbH" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as SYSTEM. 2024-1 is a fixed version. |
| CVE-2023-31068 | Critical | 2023-09-11 | Not applicable | Working exploit published | An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes. |
| CVE-2023-31067 | Critical | 2023-09-11 | Not applicable | Working exploit published | An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www. |
| CVE-2023-29923 | Medium | 2023-04-19 | Mitigation candidate | Working exploit published | PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. |
| CVE-2023-26918 | Critical | 2023-04-14 | Not applicable | Working exploit published | Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan horse that will be executed as LocalSystem. This occurs because %ProgramFiles%\FileReplicationPro allows Everyone:(F) access. |
| CVE-2021-43326 | High | 2021-12-15 | Not applicable | Working exploit published | Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory. |
| CVE-2021-35312 | High | 2021-08-06 | Not applicable | Working exploit published | A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Service.exe" has incorrect permissions, allowing a local unprivileged user to replace it with a malicious file that will be executed with "LocalSystem" privileges. |
| CVE-2021-3394 | High | 2021-02-09 | Not applicable | Working exploit published | Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation. |
| CVE-2020-12608 | High | 2020-05-07 | Not applicable | Working exploit published | An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter. |
| CVE-2019-15793 | High | 2020-04-24 | Not applicable | Working exploit published | In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into init_user_ns, whereas they should have been translated into the s_user_ns for the lower filesystem. This resulted in using ids other than the intended ones in the lower fs, which likely did not map into the shifts s_user_ns. A local attacker could use this to possibly bypass discretionary access control permissions. |
| CVE-2020-7943 | High | 2020-03-11 | Not applicable | Working exploit published | Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13 |
| CVE-2020-9039 | Critical | 2020-02-22 | Not applicable | Working exploit published | Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The /settings REST endpoint exposed by the projector process is an endpoint that administrators can use for various tasks such as updating configuration and collecting performance profiles. The endpoint was unauthenticated and has been updated to only allow authenticated users to access these administrative APIs. |
| CVE-2020-0009 | Medium | 2020-01-08 | Not applicable | Working exploit published | In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932 |
| CVE-2013-4859 | High | 2019-12-27 | Not applicable | Working exploit published | INSTEON Hub 2242-222 lacks Web and API authentication |
| CVE-2019-14737 | High | 2019-10-14 | Not applicable | Working exploit published | Ubisoft Uplay 92.0.0.6280 has Insecure Permissions. |
| CVE-2019-17124 | Critical | 2019-10-09 | Not applicable | Working exploit published | Kramer VIAware 2.5.0719.1034 has Incorrect Access Control. |
| CVE-2018-14335 | Medium | 2018-07-24 | Mitigation candidate | Working exploit published | An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file. |
| CVE-2016-6914 | High | 2017-12-27 | Not applicable | Working exploit published | Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file. |
| CVE-2017-12763 | High | 2017-08-29 | Not applicable | Working exploit published | An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files. |
| CVE-2017-11741 | High | 2017-08-08 | Not applicable | Working exploit published | HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts. |
| CVE-2016-5425 | High | 2016-10-13 | Mitigation candidate | Working exploit published | The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group. |
| CVE-2016-3943 | High | 2016-04-18 | Not applicable | Working exploit published | Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module. |
| CVE-2015-7378 | High | 2016-04-18 | Not applicable | Working exploit published | Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying Panda_URL_Filteringb.exe. |
| CVE-2015-7985 | High | 2015-11-24 | Not applicable | Working exploit published | Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file. |
| CVE-2006-5014 | High | 2006-09-27 | Not applicable | Working exploit published | Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin. |
| CVE-1999-0426 | Critical | 1999-03-01 | Not applicable | Working exploit published | The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. |