3798 matches found
UBUNTU-CVE-2022-47927
An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files inclu...
CVE-2022-39186 EXFO - BV-10 Performance Endpoint Unit Misconfiguration
EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...
Cisco CX Cloud Agent 安全漏洞
Cisco CX Cloud Agent is a cloud agent application from Cisco USA. A security vulnerability exists in Cisco CX Cloud Agent that stems from insecure file permissions...
Cisco CX Cloud Agent 安全漏洞
Cisco CX Cloud Agent is a cloud agent application from Cisco USA. A security vulnerability exists in Cisco CX Cloud Agent that stems from insecure file permissions. An attacker can exploit the vulnerability to elevate privileges...
Cisco CX Cloud Agent Privilege Escalation Vulnerabilities
Multiple vulnerabilities in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate privileges. These vulnerabilities are due to insecure file permissions. A successful exploit could allow an attacker to take complete control of the affected device. For more information about...
PT-2023-1104 · Cisco · Cisco Cx Cloud Agent
Name of the Vulnerable Software and Affected Versions: Cisco CX Cloud Agent affected versions not specified Description: A vulnerability in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate their privileges due to insecure file permissions. An attacker could exploit thi...
PT-2023-1103 · Cisco · Cisco Cx Cloud Agent
Name of the Vulnerable Software and Affected Versions: Cisco CX Cloud Agent affected versions not specified Description: A vulnerability in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate their privileges due to insecure file permissions. An attacker could exploit thi...
Apache James 信息泄露漏洞
Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server written entirely in Java from the Apache Foundation in the U.S. An authorization issue vulnerability exists in Apache James, which stems from a vulnerability in the MIME4J TempFileStorageProvider using improperl...
PT-2023-14754 · Apache · Mime4J
Name of the Vulnerable Software and Affected Versions: Apache James MIME4J versions prior to 0.8.9 Description: Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. Recommendations: For Apache James MIME...
Amazon Linux 2 : samba, --advisory ALAS2-2021-1649 (ALAS-2021-1649)
The version of samba installed on the remote host is prior to 4.10.16-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1649 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
IBM Navigator for I SQL Injection Vulnerability
IBM Navigator for i is a console interface used in IBMi by International Business Machines IBM to perform and manage critical tasks in IBMi. IBM Navigator for i is vulnerable to SQL injection in versions 7.3, 7.4, and 7.5. The vulnerability stems from the application's lack of validation of...
CVE-2022-43859
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface. By performing a UNION based SQL injection an attacker could see file permissions through this interface. IBM X-Force ID:...
Sql injection
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface. By performing a UNION based SQL injection an attacker could see file permissions through this interface. IBM X-Force ID:...
CVE-2022-43859 IBM Navigator for i SQL injection
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface. By performing a UNION based SQL injection an attacker could see file permissions through this interface. IBM X-Force ID:...
CVE-2022-43859 IBM Navigator for i SQL injection
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface. By performing a UNION based SQL injection an attacker could see file permissions through this interface. IBM X-Force ID:...
PT-2022-7106 · Ibm · Ibm Navigator For I
Name of the Vulnerable Software and Affected Versions: IBM Navigator for i versions 7.3 through 7.5 Description: The issue is related to the lack of protection for the SQL query structure in the IBM Navigator graphical interface of the IBM i operating system. This could allow a remote attacker to...
IBM Navigator for i SQL注入漏洞
IBM Navigator for i is a console interface used in IBMi by International Business Machines IBM to perform and manage critical tasks in IBMi. IBM Navigator for i is vulnerable to SQL injection in versions 7.3, 7.4, and 7.5. The vulnerability stems from the application's lack of validation of...
GHSA-CX45-565Q-6QX8 SilverStripe Subsite weakens file permissions
The subsites module can weaken edit restrictions on some files and allow a malicious user to edit files they do not have edit rights to. This only affects projects with the subsites module installed. Regression testing should focus on custom file logic. Be advised that this is not a case of a use...
SilverStripe Subsite weakens file permissions
The subsites module can weaken edit restrictions on some files and allow a malicious user to edit files they do not have edit rights to. This only affects projects with the subsites module installed. Regression testing should focus on custom file logic. Be advised that this is not a case of a use...
