MagicSpam 2.0.13 - Insecure File Permission Vulnerability

Document Title: =============== MagicSpam 2.0.13 - Insecure File Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2113 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5693 CVE-ID: ======= CVE-2018-5693 Release Date:...

MagicSpam 2.0.13 Insecure File Permission

Document Title: =============== MagicSpam 2.0.13 - Insecure File Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2113 Release Date: ============= 2018-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

Nylas Mail Lives Information Disclosure Vulnerability

Nylas Mail Lives is an open source, extensible desktop mail application. A security vulnerability exists in Nylas Mail Lives version 2.2.2, which stems from the program assigning 0755 privileges to $HOME/.nylas-mail. A local attacker can exploit the vulnerability to obtain sensitive authenticatio...

TeamCity 2017.1.5 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits TeamCity 2017.1.5 - Weak file permissions - Privilege Escalation ===================================================== Vendor Homepage: http://www.jetbrains.com Date: 17 Oct 2017 Version : TeamCity Version: 2017.1.5 Build: 47175 Tested on:...

CVE-2017-2733

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

Design/Logic Flaw

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

CVE-2017-2733

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

CVE-2017-2733

Vulnerability: CVE-2017-2733 affects Huawei Honor 6X devices running older firmware versions (BLN-AL10C00B357 and BLN-AL20C00B357). Root cause: improper file permissions enabling information disclosure. Impact: an attacker can trick the user into installing a malicious app that reads the cipher t...

Icecream 4.53 / Pro Privilege Escalation Vulnerability

Icecream versions 4.53 and Pro suffer from a file permission privilege escalation vulnerability. Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation Vulnerability Class: ==================== Privilege Escalation Product & Service Introduction:...

Hola VPN 1.34 Privilege Escalation

Document Title: =============== Hola VPN v1.34 - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2062 Release Date: ============= 2017-05-03 Vulnerability Laboratory ID VL-ID: ==================================== 2062...

Icecream v4.53 & Pro - File Permission Privilege Escalation

Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2058 Release Date: ============= 2017-04-27 Vulnerability Laboratory ID VL-ID: ==================================...

Icecream v4.53 & Pro - File Permission Privilege Escalation

Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2058 Release Date: ============= 2017-04-26 Vulnerability Laboratory ID VL-ID: ==================================...

Scientific Linux Security Update : mysql on SL6.x i386/x86_64 (20170124)

Security Fixes : - It was discovered that the MySQL logging functionality allowed writing to MySQL configuration files. An administrative database user, or a database user with FILE privileges, could possibly use this flaw to run arbitrary commands with root privileges on the system running the...

RedHat Update for mysql RHSA-2017:0184-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: mysql security update

An update for mysql is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits ===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: email protected...

Teradata Virtual Machine Community Edition 15.10 Insecure File Permission Vulnerability

Teradata Virtual Machine Community Edition version 15.10 suffers from an insecure file permission vulnerability. Title: Teradata Virtual Machine Community Edition v15.10 has insecure file permission Author: Larry W. Cashdollar, @larry0 Date: 2016-10-01 Download Site:...

MGASA-2016-0283 Updated kernel-tmb packages fix security vulnerabilities

This update is based on the upstream 4.4.16 kernel and fixes at least theese security issues: nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c. CVE-2016-1237. The...

ABB DataManagerPro Elevation of Privilege Vulnerability

ABB DataManagerPro is data management and analysis software. ABB DataManagerPro has a security vulnerability in the file permission settings during installation that could allow an attacker to elevate its privileges to system administrator...

Fedora 23 : php-doctrine-orm (2016-7e229134f9)

v2.4.8 Security - CVE-2015-5723 php-doctrine-orm filesystem permission issues - https://access.redhat.com/security/cve/CVE-2015-5723 - http://www.doctrine-project.org/2015/08/31/securitymisconfigurationvulnerabilityinvariousdoctrineprojects.html Bug - DDC-3310 - GH-1138 Join column index names -...