3795 matches found
CVE-2012-0863
Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file...
CVE-2012-0863
Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file...
IBM WebSphere Application Server 7.0 < Fix Pack 21 Multiple Vulnerabilities
IBM WebSphere Application Server 7.0 before Fix Pack 21 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An unspecified cross-site scripting issue exists related to the 'Web 2.0 Messaging service'. PM37840 - A security exposure whe...
IBM WebSphere Application Server 8.0 < Fix Pack 2 Multiple Vulnerabilities
IBM WebSphere Application Server 8.0 before Fix Pack 2 appears to be running on the remote host and is potentially affected by the following vulnerabilities : - An unspecified cross-site scripting issue exists related to the 'Web 2.0 Messaging service'. PM37840 - A security exposure when using...
IBM WebSphere Application Server 6.1 < 6.1.0.43 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 43 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An unspecified error exists related to WS-Security enabled JAX-RPC applications. PM45181 - Insecure file permissions are appli...
IBM Db2 'nodes.reg' Permission Weakness Vulnerability
IBM Db2 is prone to a permission weakness vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...
Samba 4.x < 4.0.4 AD DC File Permissions
Binary data 6720.prm...
IBM DB2 9.5 < 9.5 Fix Pack 9 Multiple Vulnerabilities
Binary data 6347.prm...
DB2 9.5 < Fix Pack 9 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 9.5 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by the following vulnerabilities : - Incorrect, world-writable file permissions are in place for the file 'NODES.REG'. IC79518 - An unspecified error can allow...
CVE-2012-0450
Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations...
ShuzirenCMS v4. 0 background Get a Shell and fix-vulnerability warning-the black bar safety net
A simple look under the... Find Asp Php script permission to seal too tightly throughout the website, directory any one not to write Test environment/system: Digital Information Center content management system ShuzirenCMS v4. 0 / Windows Regardless of your social worker,dig yourself the...
CVE-2011-5060
The CVE-2011-5060 issue affects the PAR Perl module (PAR) prior to version 1.003. The vulnerability arises because par_mktmpdir creates temporary files in a directory without verifying ownership and permissions, allowing a local attacker to overwrite files when another user extracts a PAR-packed ...
CVE-2011-4339
ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...
DEBIAN-CVE-2011-4339
ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...
CVE-2011-4339
ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...
Ubuntu 11.10 : colord vulnerability (USN-1289-1)
It was discovered that colord incorrectly handled certain SQL queries. A local attacker could exploit this to modify arbitrary sqlite databases. On Ubuntu, colord runs as its own user by default, so standard file permissions would limit which databases could be altered. Note that Tenable Network...
USN-1289-1: colord vulnerability
It was discovered that colord incorrectly handled certain SQL queries. A local attacker could exploit this to modify arbitrary sqlite databases. On Ubuntu, colord runs as its own user by default, so standard file permissions would limit which databases could be altered...
Low: Red Hat Security Advisory: php-pear security and bug fix update
An updated php-pear package that fixes one security issue and multiple bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
Medium: kernel
Issue Overview: The skbgroheaderslow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload GRO is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service system crash via crafted network...
