Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

CVEs (1,555)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-1985 1Paloaltonetworks 1Secdo Jun 17, 2026 Apr 8, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows.
CVE-2018-21061 1Google 1Android Nov 21, 2024 Apr 8, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) software. A fake charger can execute critical functions in the locked state. The Samsung ID is SVE-2016-6341 (August 2018).
CVE-2017-18669 1Google 1Android Nov 21, 2024 Apr 7, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered on Samsung mobile devices with N(7.x) software. Persona has an unprotected API that allows launch of any activity with system privileges. The Samsung ID is SVE-2017-9000 (June 2017).
CVE-2017-18668 1Google 1Android Nov 21, 2024 Apr 7, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered on Samsung mobile devices with M(6.0) software. Attackers can prevent users from making outbound calls and sending outbound text messages. The Samsung ID is SVE-2017-8706 (June 2017).
CVE-2020-7004 1Visam 2Vbase Editor Vbase Web Remote Jun 17, 2026 Apr 3, 2020 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privil...Show more VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application.Show less
CVE-2020-11444 1Sonatype 1Nexus Jun 17, 2026 Apr 2, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
CVE-2019-3944 1Parrot 1Anafi Firmware Jun 17, 2026 Apr 1, 2020 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight.
CVE-2020-5551 1Toyota 1Display Control Unit Jun 17, 2026 Mar 30, 2020 N/A· v4 8.8 HIGH· v3 5.4 MEDIUM· v2 Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexu...Show more Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexus (LC, LS, NX, RC, RC F), TOYOTA CAMRY, and TOYOTA SIENNA manufactured in the regions other than Japan from Oct. 2016 to Oct. 2019. An attacker with certain knowledge on the target vehicle control system may be able to send some diagnostic commands to ECUs with some limited availability impacts; the vendor states critical vehicle controls such as driving, turning, and stopping are not affected.Show less
CVE-2020-10939 1Phoenixcontact 1Pc Worx Srt Jun 17, 2026 Mar 27, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.
CVE-2020-3766 1Adobe 1Genuine Integrity Service Jun 17, 2026 Mar 25, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.
CVE-2019-20536 1Google 1Android Jun 17, 2026 Mar 24, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software. The Firewall application mishandles the PermissionWhiteLists protection mechanism. The Samsung ID is SVE-201...Show more An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software. The Firewall application mishandles the PermissionWhiteLists protection mechanism. The Samsung ID is SVE-2019-14299 (November 2019).Show less
CVE-2020-9392 1Supsystic 1Pricing Table By Supsystic Jun 17, 2026 Mar 23, 2020 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated u...Show more An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.Show less
CVE-2020-10660 1Hashicorp 1Vault Jun 17, 2026 Mar 23, 2020 N/A· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.
CVE-2020-10792 1It Novum 1Openitcockpit Jun 17, 2026 Mar 20, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header.
CVE-2019-16061 1Netsas 1Enigma Network Management Solution Jun 17, 2026 Mar 19, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data (e.g.,...Show more A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data (e.g., .htpasswd) and create/modify/delete content (e.g., under /var/www/html/docs) within the operating system.Show less
CVE-2014-2723 1Fortinet 4Fortibalancer 1000 Firmware Fortibalancer 2000 FirmwareFortibalancer 3000 Firmware+1 more Nov 21, 2024 Mar 19, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is ca...Show more In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.Show less
CVE-2014-2722 1Fortinet 4Fortibalancer 1000 Firmware Fortibalancer 2000 FirmwareFortibalancer 3000 Firmware+1 more Nov 21, 2024 Mar 19, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is ca...Show more In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.Show less
CVE-2014-2721 1Fortinet 4Fortibalancer 1000 Firmware Fortibalancer 2000 FirmwareFortibalancer 3000 Firmware+1 more Nov 21, 2024 Mar 19, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is ca...Show more In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.Show less
CVE-2020-0514 1Intel 1Graphics Driver Jun 17, 2026 Mar 12, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2020-0508 1Intel 1Graphics Driver Jun 17, 2026 Mar 12, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially e...Show more Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access.Show less

Previous 1...676869...78 Next