Vulnerabilities > Improper Preservation of Permissions

DATE CVE VULNERABILITY TITLE RISK
2019-11-25 CVE-2019-13682 Improper Preservation of Permissions vulnerability in Google Chrome
Insufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
network
low complexity
google CWE-281
8.8
2019-11-25 CVE-2019-13668 Improper Preservation of Permissions vulnerability in Google Chrome
Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google CWE-281
7.4
2019-11-21 CVE-2019-16539 Improper Preservation of Permissions vulnerability in Jenkins Support Core
A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles.
network
low complexity
jenkins CWE-281
6.5
2019-10-14 CVE-2019-14226 Improper Preservation of Permissions vulnerability in Open-Xchange Appsuite
OX App Suite through 7.10.2 has Insecure Permissions.
network
low complexity
open-xchange CWE-281
8.1
2019-10-09 CVE-2019-0073 Improper Preservation of Permissions vulnerability in Juniper Junos
The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions.
local
low complexity
juniper CWE-281
7.1
2019-10-02 CVE-2019-14956 Improper Preservation of Permissions vulnerability in Jetbrains Youtrack
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names.
network
low complexity
jetbrains CWE-281
4.3
2019-09-27 CVE-2019-11748 Improper Preservation of Permissions vulnerability in Mozilla Firefox
WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context.
network
low complexity
mozilla CWE-281
6.5
2019-09-09 CVE-2019-6791 Improper Preservation of Permissions vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-281
6.5
2019-09-09 CVE-2019-6995 Improper Preservation of Permissions vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-281
6.5
2018-08-03 CVE-2018-12989 Improper Preservation of Permissions vulnerability in Pearsonvue Console 8 and Iqsystem 7
The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges.
local
low complexity
pearsonvue CWE-281
6.7