Vulnerabilities > Incorrect Default Permissions

DATE CVE VULNERABILITY TITLE RISK
2022-01-26 CVE-2021-41166 Incorrect Default Permissions vulnerability in Nextcloud
The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform.
network
low complexity
nextcloud CWE-276
5.3
2022-01-25 CVE-2021-46085 Incorrect Default Permissions vulnerability in Oneblog Project Oneblog
OneBlog <= 2.2.8 is vulnerable to Insecure Permissions.
network
low complexity
oneblog-project CWE-276
6.5
2022-01-25 CVE-2021-46086 Incorrect Default Permissions vulnerability in Mindskip Xzs-Mysql T3.4.0
xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions.
network
low complexity
mindskip CWE-276
7.5
2022-01-24 CVE-2022-22296 Incorrect Default Permissions vulnerability in Hospital'S Patient Records Management System Project Hospital'S Patient Records Management System 1.0
Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint.
5.3
2022-01-12 CVE-2021-43860 Incorrect Default Permissions vulnerability in multiple products
Flatpak is a Linux application sandboxing and distribution framework.
local
low complexity
flatpak fedoraproject redhat debian CWE-276
8.6
2022-01-10 CVE-2021-40004 Incorrect Default Permissions vulnerability in Huawei Harmonyos
The cellular module has a vulnerability in permission management.
network
low complexity
huawei CWE-276
7.5
2022-01-10 CVE-2021-45003 Incorrect Default Permissions vulnerability in Nikhil-Bhalerao Laundry Booking Management System 1.0
Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in profile.php through the "image" parameter that can execute a webshell payload.
network
low complexity
nikhil-bhalerao CWE-276
critical
9.8
2022-01-03 CVE-2021-37132 Incorrect Default Permissions vulnerability in Huawei Harmonyos
PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission.
network
low complexity
huawei CWE-276
5.3
2022-01-03 CVE-2021-39967 Incorrect Default Permissions vulnerability in Huawei Emui, Harmonyos and Magic UI
There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.
network
low complexity
huawei CWE-276
7.5
2021-12-27 CVE-2021-45335 Incorrect Default Permissions vulnerability in Avast Antivirus
Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files.
local
low complexity
avast CWE-276
8.8