CWE-281.

Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights.

• CWE-281

Intel(R) Quartus(R) Prime Standard Edition: Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime…

• Intel(R) Quartus(R) Prime Standard Edition
• CWE-281

Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux

• CWE-281

>=1.5.0, <1.5.9 · fixed in 1.5.9

It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro

• CWE-281

>=11.4, <11.10.11 || >=12.0, <12.6.3 || >=12.7, <12.8 · fixed in 11.10.11, 12.6.3, 12.8

If certificates that signed grub are installed into db, grub can be booted directly.

• grub2
• CWE-281

A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU.

• QEMU
• CWE-281

Local arbitrary code execution in splitinstall in Android's Play Core

• Google LLC Android Play Core
• CWE-281

Files added to tar with Phar::buildFromIterator have all-access permissions

• PHP
• CWE-281

Microsoft Corporation Microsoft Windows: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista…

• Microsoft Corporation Microsoft Windows
• CWE-281