CWE-732
High likelihoodIncorrect Permission Assignment for Critical Resource
Parent: CWE-285 - Improper Authorization
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1,664 vulnerabilities with CWE-732
CVE-2019-9464
MEDIUM
Android 10 - Incorrect Permission Assignment for Critical Resource in Location Access Warning
CVSS 5.5
CVE-2019-17388
HIGH
Aviatrix VPN Client <= 2.2.10 - Local Privilege Escalation via Weak Installation Directory Permissions
CVSS 7.8
CVE-2019-19522
HIGH
OpenBSD 6.6 - Incorrect Permission Assignment for Critical Resource in S/Key or YubiKey Authentication
CVSS 7.8
CVE-2019-19382
HIGH
Max Secure Anti Virus Plus <19.0.4.020 - Privilege Escalation
CVSS 7.8
CVE-2019-5212
MEDIUM
Huawei P20 Firmware emily-l29c_9.1.0.311(c10e2r1p13t8) - Information Disclosure via Huawei Share
CVSS 5.5
CVE-2019-14812
HIGH
Ghostscript <9.50 - Privilege Escalation
CVSS 7.8
CVE-2019-18456
MEDIUM
GitLab 8.17.0-12.4.0 - Insecure Permissions in Elasticsearch Search Feature
CVSS 5.3
CVE-2019-18453
MEDIUM
GitLab 11.6-12.4 - Insecure Permission Assignment in Email Comment Feature
CVSS 4.3
CVE-2019-18452
MEDIUM
GitLab CE/EE <12.5 - Info Disclosure
CVSS 5.3
CVE-2019-18450
MEDIUM
GitLab < 12.4.0 - Insecure Permissions in Project Labels
CVSS 4.3
CVE-2019-18449
MEDIUM
GitLab < 12.4.0 - Insecure Permissions in Autocomplete Feature
CVSS 4.3
CVE-2019-18447
MEDIUM
GitLab < 12.4.0 - Insecure Permission Assignment
CVSS 4.3
CVE-2019-18446
MEDIUM
GitLab 8.15.0-12.4.0 - Insecure Permission Assignment
CVSS 4.3
CVE-2019-18459
MEDIUM
GitLab CE/EE 11.3-12.3 - Info Disclosure
CVSS 5.3
CVE-2019-18463
MEDIUM
GitLab < 12.4.0 - Insecure Permissions
CVSS 4.3
CVE-2019-18462
MEDIUM
GitLab 11.3-12.4 - Insecure Permission Assignment
CVSS 4.3
CVE-2019-13681
MEDIUM
Chrome < 77.0.3865.75 - Download Restriction Bypass via Crafted HTML Page
CVSS 4.3
CVE-2019-13679
LOW
Google Chrome <77.0.3865.75 - Info Disclosure
CVSS 3.3
CVE-2019-13677
MEDIUM
Google Chrome <77.0.3865.75 - Auth Bypass
CVSS 6.5
CVE-2019-13676
MEDIUM
Google Chrome < 77.0.3865.75 - Domain Spoofing via Crafted HTML Page
CVSS 4.3
CVE-2019-13665
MEDIUM
Google Chrome < 77.0.3865.75 - File Download Protection Bypass via Crafted HTML Page
CVSS 6.5
CVE-2019-4214
LOW
IBM SmartCloud Analytics Log Analysis 1.3.1-1.3.5 - Sensitive Information Exposure via Missing Secure Attribute
CVSS 3.7
CVE-2019-19197
HIGH
Kyrol Internet Security 9.0.6.9 - Privilege Escalation/DoS/RCE
CVSS 7.8
CVE-2019-16406
HIGH
Centreon Web 19.04.4 - Privilege Escalation
CVSS 7.8
CVE-2019-18958
HIGH
Nitro Pro < 13.2 - Arbitrary Code Execution via Debug Log File
CVSS 7.8
Details
Vulnerabilities
1,664
Exploit Likelihood
High