Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI version 5.8.5, which stems from insecure file permissions set ...

CVE-2021-28568

Adobe Genuine Services version 7.1 and earlier is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user...

PT-2021-17879

Name of the Vulnerable Software and Affected Versions: Adobe Genuine Services versions 7.1 and earlier Description: The issue is related to insecure file permissions during the installation process. A local authenticated attacker could exploit this to achieve privilege escalation in the context o...

CVE-2021-31217

In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM...

PT-2021-19203

Name of the Vulnerable Software and Affected Versions SolarWinds DameWare Mini Remote Control Server version 12.0.1.200 Description The issue is related to insecure file permissions in the SolarWinds DameWare Mini Remote Control Server, which allows file deletion as SYSTEM. Recommendations For...

CVE-2021-20490

IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791...

CVE-2021-20490: Incorrect Default Permissions

IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791...

Security Bulletin: IBM Spectrum Protect Plus has Insecure File Permissions due to not setting the Sticky Bit (CVE-2021-20490)

Summary IBM Spectrum Protect Plus has several directories that are failing security scans due to the sticky bit not being set on world-writable files. Vulnerability Details CVEID: CVE-2021-20490 DESCRIPTION: IBM Spectrum Protect Plus could allow a local user to cause a denial of service due to...

CVE-2021-20490

IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791...

IBM Spectrum Protect Plus 安全漏洞

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

CVE-2021-27483

ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user...

ZOLL Defibrillator Dashboard 安全漏洞

ZOLL Defibrillator Dashboard is a defibrillator management tool. A mismanagement of privileges vulnerability exists in ZOLL Defibrillator Dashboard versions prior to 2.2. The vulnerability stems from the product containing insecure file system permissions. An attacker could exploit the...

CVE-2018-16494

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa...

Splinterware System Scheduler Professional 5.30 - Unquoted Service Path Vulnerability

Exploit Title: Splinterware System Scheduler Professional 5.30 - Unquoted Service Path Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.splinterware.com Software Link: https://www.splinterware.com/download/ssproeval.exe Version: 5.30 Professional Tested on: Windows 10 Pro 20H2 x64...

Adobe Genuine Integrity Service 输入验证错误漏洞

Adobe Genuine Service is a free service that periodically verifies that the Adobe applications on your computer are genuine and notifies customers if they are not. An insecure file permission vulnerability exists in Adobe Genuine Service 7.1 and earlier versions. An attacker could exploit the...

CVE-2021-28568

Adobe Genuine Services version 7.1 and earlier is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user...

CVE-2020-27568

Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security...

CVE-2020-27568

Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security...

CVE-2020-27568

The CVE-2020-27568 entry concerns Aviatrix Controller 5.3.1516 with insecure file permissions. The issue is caused by the presence of world-writable files and directories in the controller resource, as noted in multiple sources. The information provided does not include specific vulnerable compon...

PT-2021-11406

Name of the Vulnerable Software and Affected Versions: Aviatrix Controller version 5.3.1516 Description: The issue is related to insecure file permissions, where several world-writable files and directories were found in the controller resource. It's noted that all Aviatrix appliances are fully...