Permission Issues

Every one of the 99 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Cisco Prime Infrastructure Arbitrary File Upload and Command Execution VulnerabilityCVE-2018-15379Cisco · 86% likely

   Cisco

2. The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can r…CVE-2017-1688737% likely
3. htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.CVE-2014-163210% likely
4. Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter.CVE-2017-178769.5% likely
5. Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.CVE-2014-16319.3% likely
6. ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.CVE-2015-77817.1% likely
7. phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.CVE-2014-60475.7% likely
8. Memory leak in ICMP6 in Linux KernelCVE-2022-0742Linux · CVSS 9.1 · 5.0% likely

   Linux

9. The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files…CVE-2016-86052.8% likely
10. In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belong…CVE-2017-114632.4% likely
11. The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_…CVE-2015-78892.4% likely
12. Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checki…CVE-2016-9461Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Se… · 2.0% likely
13. An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Exchange ActiveSync" component. It allows remote attackers to erase a device…CVE-2017-70881.9% likely
14. Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was…CVE-2016-9462Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Se… · 1.9% likely
15. IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions.CVE-2016-3022IBM Corporation · 1.7% likely

    IBM

16. A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keys meant for Firefox only. Note: This is…CVE-2016-9061Mozilla · 1.6% likely

    Mozilla

17. A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affect…CVE-2016-5299Mozilla · 1.6% likely

    Mozilla

18. A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.CVE-2017-5809Hewlett Packard Enterprise · 1.6% likely

    Hewlett Packard Enterprise

19. cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124).CVE-2016-108181.6% likely
20. Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure VulnerabilityCVE-2021-1437Cisco · CVSS 7.5 · 1.5% likely

    Cisco

21. HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permi…CVE-2016-8520Hewlett Packard Enterprise · 1.4% likely

    Hewlett Packard Enterprise

22. An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers t…CVE-2017-71441.3% likely
23. cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).CVE-2016-108461.3% likely
24. The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual m…CVE-2017-65131.3% likely
25. Secret data of processes managed by CM is not secured by file permissions.CVE-2017-93271.2% likely
26. OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.CVE-2017-170601.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.