3795 matches found
Cisco IOS XE IOx Guest Shell Namespace Protection Vulnerability
Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. An IOx Guest Shell namespace protection vulnerability exists in the file system of Cisco IOS XE. The vulnerability stems from insufficient file permissions. An attacker can exploit this vulnerability by modifyi...
CVE-2019-12670
A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficient file permissions. An attacker could exploit this...
Design/Logic Flaw
A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device. The vulnerability is due to insufficient file permissions. An attacker could exploit this...
CVE-2019-12670
Cisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability (CVE-2019-12670) affects the filesystem permissions of the IOx Guest Shell namespace on Cisco IOS XE. The issue arises from insufficient file permissions, allowing an authenticated, local attacker within the IOx Guest Shell ...
Amazon Linux AMI : php71 / php72,php73 (ALAS-2019-1282)
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...
Input validation
Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...
CVE-2019-11166
The CVE-2019-11166 issue affects Intel® Easy Streaming Wizard prior to version 2.1.0731. The root cause is improper file permissions in the installer, which could let an authenticated local user escalate privileges. Multiple sources (Intel advisory and vendor/press records) corroborate a local es...
CVE-2019-11166
Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...
Low: glib2
Issue Overview: No CVE associated with this advisory Affected Packages: glib2 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update glib2 or yum update...
Intel® Easy Streaming Wizard Advisory
Summary: A potential security vulnerability in the Intel® Easy Streaming Wizard may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11166 Description: Improper file permissions in the installer for...
CVE-2018-18630
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code...
Code injection
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code...
CVE-2018-18630
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code...
CVE-2019-12645
A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...
CVE-2019-12645
A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...
CVE-2019-12645 Cisco Jabber Client Framework for Mac Code Execution Vulnerability
A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...
Cisco Jabber Client Framework for Mac Code Execution Vulnerability
A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...
USN-4049-4: GLib regression | Cloud Foundry
Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-4049-1 fixed a vulnerability in GLib. The update introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that GLib...
SUSE SLES12 Security Update : glib2 (SUSE-SU-2019:1830-2)
This update for glib2 fixes the following issues : Security issue fixed : CVE-2019-13012: Fixed improper restriction of file permissions when creating directories bsc1139959. Non-security issue fixed: Added explicit requires between libglib2 and libgio2 bsc1140122. Note that Tenable Network...