NewStart CGSL CORE 5.05 / MAIN 5.05 : docker-ce Multiple Vulnerabilities (NS-SA-2023-0014)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has docker-ce packages installed that are affected by multiple vulnerabilities: - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to...

CVE-2022-3682

A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This issue affects: All SDM600 versions prior ...

Design/Logic Flaw

A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This issue affects: All SDM600 versions prior ...

CVE-2022-3682 SDM600 file permission validation

A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This issue affects: All SDM600 versions prior ...

CVE-2022-3682

The CVE-2022-3682 vulnerability affects Hitachi Energy SDM600. It stems from a file permission validation flaw in SDM600, allowing an attacker with system access to upload a crafted message to the system node and achieve arbitrary code execution. Affected versions are all SDM600 releases prior to...

SDM600 代码问题漏洞

ABB SDM600 is a system data manager from ABB Switzerland. A security vulnerability exists in SDM600 versions prior to 1.2.23000.291, which stems from the presence of a file permission validation vulnerability that could be exploited by an attacker to cause arbitrary code execution...

PT-2023-2029 · Hitachi Energy · Sdm600

Name of the Vulnerable Software and Affected Versions: Hitachi Energy System Data Manager SDM600 versions prior to 1.2 FP3 HF4 Build Nr. 1.2.23000.291 Description: A vulnerability exists in the SDM600 file permission validation, allowing an attacker to exploit the system by uploading a specially...

CVE-2022-48360

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48360

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48360

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality...

PT-2023-15738 · Unknown · Facial Recognition Module

Name of the Vulnerable Software and Affected Versions: Facial recognition module affected versions not specified Description: The issue concerns a vulnerability in file permission control within the facial recognition module. This could potentially impact confidentiality if successfully exploited...

CVE-2022-48360

CVE-2022-48360 concerns the facial recognition module, where a vulnerability in file permission control could lead to confidentiality exposure. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges required, and no user interacti...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which arises from a one-time permission granted to a local file extending to other local files loaded in the same tab...

Remote Code Execution (RCE)

openmage/magento-lts is vulnerable to Remote Code Execution RCE. The vulnerability exists due to insufficient input validation which allows an administrator with upload file permission to create products which results in arbitrary code execution via the convert profile...

CVE-2020-36611 File and Directory Permission Vulnerability in Hitachi Tuning Manager

Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS, Hitachi Tuning Manager - Agent for SAN Switch components allows local users to read and write specific...

EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2022-2890)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate...

EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2022-2872)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate...

CVE-2022-41954 Temporary File Information Disclosure Vulnerability

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems not Windows or macos, MPXJ's use of File.createTempFile.. results in temporary files being created with the permissions -rw-r--r--. This means that any other...

Debian dla-3164 : python-django - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3164 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3164-1 [email protected]...