CVE-2017-14473

CVE-2017-14473 is an Unauthenticated Data/Program/Function File Improper Access Control vulnerability affecting Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier (tested up to FRN 21.2, 21.0 and 15). The TALOS advisory (TALOS-2017-0443) describes that an unauthenticated attacker can rea...

CVE-2017-14462

CVE-2017-14462 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The issue is an improper access-control in data, program, and function file permissions that lets unauthenticated, remote attackers send crafted packets to read/write files, disclose sensitive information, modify ...

CVE-2017-14466

CVE-2017-14466 affects Rockwell Automation Allen-Bradley Micrologix 1400 Series B FRN 21.2 and earlier. The root cause is improper access control in data, program, and function file permissions, enabling unauthenticated packets to write to filetype 0x03 and overwrite the Master Password, potentia...

PT-2018-5657 · Allen Bradley · Allen Bradley Micrologix 1400 Series B

Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B versions 21.2 and before Description: An exploitable access control issue exists in the data, program, and function file permissions functionality. A specially crafted packet can cause a read or write...

ShoprLynx 9.2.3 Insecure File Permissions Vulnerability

ShoprLynx version 9.2.3 suffers from an insecure file permissions vulnerability. ShaprLynx v9.2.3 Insecure File Permissions Vendor: Lynx Software Pty Ltd. Product web page: https://www.sharplynx.com Affected version: 9.02.0003 Summary: Back Office Software for Sharp POS Terminals. Catering for th...

ShoprLynx 9.2.3 Insecure File Permissions

ShaprLynx v9.2.3 Insecure File Permissions Vendor: Lynx Software Pty Ltd. Product web page: https://www.sharplynx.com Affected version: 9.02.0003 Summary: Back Office Software for Sharp POS Terminals. Catering for the needs of retail and hospitality businesses, SharpLynx has been developed as a...

SharpLynx v9.2.3 Insecure File Permissions

Summary Back Office Software for Sharp POS Terminals. Catering for the needs of retail and hospitality businesses, SharpLynx has been developed as a modular software solution with options from simple program management and sales analysis through to multi-location stock control. Description...

CVE-2014-5450

Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to obtain sensitive information by reading license files...

SUSE-SU-2018:0675-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: PostgreSQL was updated to version 9.4.15, the full release notes are here: https://www.postgresql.org/docs/9.4/static/release-9-4-15.html - CVE-2018-1053: Ensure that all temporary files made by pgupgrade are non-world-readable. bsc1077983...

CVE-2017-1002101

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type including non-privileged pods, subject to file permissions can access files/directories outside of the volume, including the host's filesyste...

CVE-2017-1002101

CVE-2017-1002101 affects Kubernetes versions 1.3.x–1.6.x and prior to 1.7.14, 1.8.9, and 1.9.4. The issue arises when containers use subpath volume mounts with any volume type, allowing access to files/directories outside the volume, including the host filesystem. Root cause: subpath mounts bypas...

SUSE-SU-2018:0507-1 Security update for postgresql96

This update for postgresql96 to version 9.6.7 fixes the following issues: - CVE-2018-1053: Ensure that all temporary files made by pgupgrade are non-world-readable. bsc1077983 A full changelog is available here: https://www.postgresql.org/docs/9.6/static/release-9-6-7.html...

CVE-2016-8742

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...

CVE-2016-8742

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...

CVE-2016-8742

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...

CVE-2016-8742

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...

Grouper - A PowerShell script for helping to find vulnerable settings in AD Group Policy

Grouper is a slightly wobbly PowerShell module designed for pentesters and redteamers although probably also useful for sysadmins which sifts through the usually very noisy XML output from the Get-GPOReport cmdlet part of Microsoft's Group Policy module and identifies all the settings defined in...

mysql: unsafe chmod/chown use in init script (CPU Jan 2017)

Multiple flaws were found in the way the MySQL init script handled initialization of the database data directory and permission setting on the error log file. The mysql operating system user could use these flaws to escalate their privileges to root...

Find Vulnerable Settings in AD Group Policy: Grouper

Grouper is a slightly wobbly PowerShell module designed for pentesters and redteamers although probably also useful for sysadmins which sifts through the usually very noisy XML output from the Get-GPOReport cmdlet part of Microsoft’s Group Policy module and identifies all the settings defined in...

CVE-2018-0089

A vulnerability in the Policy and Charging Rules Function PCRF of the Cisco Policy Suite CPS could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The attacker would also have to have access ...