4072 matches found
GHSA-RVP4-R3G6-8HXQ Insufficiently Protected Credentials via Insecure Temporary File in org.apache.nifi:nifi-single-user-utils
Impact org.apache.nifi.authentication.single.user.writer.StandardLoginCredentialsWriter contains a local information disclosure vulnerability due to writing credentials username and password to a file that is readable by all other users on unix-like systems. On unix-like systems, the system's...
Design/Logic Flaw
Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is not t...
Design/Logic Flaw
Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...
CVE-2022-31071 Octopoller gem published with world-writable files
Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is not t...
GHSA-26QJ-CR27-R5C4 Octopoller gem published with world-writable files
Impact Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is not the owner Group and Public with access to the...
WordPress插件Change Uploaded File Permissions跨站请求伪造漏洞
WordPress is a set of blogging platform developed using the PHP language. The WordPress plugin Change Uploaded File Permissions plugin 4.0.0 and earlier versions are vulnerable to cross-site request forgery, which stems from a lack of checks and can be exploited to change the file and folder...
CVE-2022-1788
Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to thi...
CVE-2022-1788
Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to thi...
Cross site request forgery (csrf)
Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to thi...
CVE-2022-1788
CVE-2022-1788 concerns the WordPress plugin “Change Uploaded File Permissions” (versions <= 4.0.0). The connected sources explicitly describe a CSRF vulnerability due to missing checks that can be exploited to change file and folder permissions across folders, potentially exposing sensitive fi...
CVE-2022-1788 Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF
Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to thi...
CVE-2022-1788: Cross-Site Request Forgery (CSRF)
Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to thi...
WordPress plugin Change Uploaded File Permissions 跨站请求伪造漏洞
WordPress is a set of blogging platform developed using the PHP language. The WordPress plugin Change Uploaded File Permissions plugin 4.0.0 and earlier versions are vulnerable to cross-site request forgery, which stems from a lack of checks and can be exploited to change the file and folder...
Exploit for Incorrect Default Permissions in Fidelissecurity Deception
Fidelis Network and Deception - CVE-2022-0486 - Insecure File...
CVE-2022-29594
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM...
CVE-2022-29594
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM...
CVE-2022-29594
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM...
CVE-2022-29594
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM...
CVE-2022-29594
The CVE affects eG Agent prior to version 7.2, where weak file permissions can allow local privilege escalation to SYSTEM. The root cause is permission misconfiguration on sensitive files used by the agent. In affected environments, exploitation would grant full host privileges; no exploit detail...