Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•5 views

CVE-2025-24346: Improper Validation of Syntactic Correctness of Input

A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated lowprivileged attacker to manipulate the “/etc/environment” file via a crafted HTTP request...

7.5CVSS7.2AI score0.00517EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/28 8:15 p.m.•35 views

CVE-2020-25507

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...

7.8CVSS7.8AI score0.00548EPSS
SaveExploits1References7
Prion
Prion
•added 2020/12/28 8:15 p.m.•27 views

Code injection

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...

7.2CVSS7.8AI score0.00548EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2020/12/28 12:00 a.m.•3 views

PT-2020-16102

Name of the Vulnerable Software and Affected Versions TeamworkCloud versions 18.0 through 19.0 Description The issue arises from an incorrect permission assignment during the installation script, allowing a local unprivileged attacker to execute arbitrary code as root. This occurs because the...

7.8CVSS0.00548EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/28 12:00 a.m.•5 views

CVE-2020-25507: Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...

7.8CVSS6.4AI score0.00548EPSS
SaveExploits1References2
Mend
Mend
•added 2011/04/29 10:00 p.m.•2 views

CVE-2011-0729

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a 1 SetSystemDefaultLangEnv or 2...

8.6CVSS0.00333EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/04/29 12:00 a.m.•10 views

CVE-2011-0729: Undefined Security Weakness

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a 1 SetSystemDefaultLangEnv or 2...

7.2CVSS5.8AI score0.00333EPSS
SaveExploits0References2
Rows per page
Query Builder