Lucene search
+L

72 matches found

NVD
NVD
•added 2026/09/22 8:17 p.m.•11 views

CVE-2026-89282

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

9.1CVSS0.00268EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 7:17 p.m.•49 views

CVE-2026-89282

The Apache Lounge Windows distribution of the Apache HTTP Server contains an insecure installation directory permissions vulnerability. The issue stems from the default installation directory on **C:**, which incorrectly inherits write access for Authenticated Users . No specific remediation, exp...

9.1CVSS5.8AI score0.00268EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/22 7:17 p.m.•50 views

CVE-2026-89282 CVE-2026-89282

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

0.00268EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:17 p.m.•11 views

EUVD-2026-84680

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

5.8AI score0.00268EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•5 views

CVE-2026-89282: Incorrect Permission Assignment for Critical Resource

The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...

9.1CVSS5.8AI score0.00268EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/08 12:00 a.m.•27 views

CVE-2026-78971

In Halo = 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions...

0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•19 views

PT-2026-3757

Name of the Vulnerable Software and Affected Versions ServerView Agents for Windows affected versions not specified Description The installer for ServerView Agents for Windows, provided by Fsas Technologies Inc., may load Dynamic Link Libraries insecurely. This could allow for the execution of...

8.4CVSS7.4AI score0.00156EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/12/02 9:31 p.m.•14 views

EUVD-2025-200324

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries...

8CVSS6.4AI score0.00118EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•14 views

Mirion Medical EC2 Software NMIS BioDose 安全漏洞

Mirion Medical EC2 Software NMIS BioDose is a software for managing and analyzing biological dosimetry data from Mirion Medical, Germany. A security vulnerability exists in Mirion Medical EC2 Software NMIS BioDose V22.02 and earlier versions, which stems from insecure installation directory...

8CVSS6.5AI score0.00118EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/12 6:50 p.m.•29 views

CVE-2025-61667 Datadog Linux Host Agent affected by local privilege escalation due to insufficient pycache permissions

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...

7CVSS0.00108EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-9808

Malware in sbrugna...

9.3CVSS6.3AI score0.0231EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-42172

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00767EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-42173

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00767EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-42980

Malicious code in bioql PyPI...

7.3CVSS7.5AI score0.00152EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-42171

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00767EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/29 12:00 a.m.•15 views

PT-2025-39888

Name of the Vulnerable Software and Affected Versions Vasion Print versions prior to 22.0.1049 Vasion Print Application versions prior to 20.0.2786 Description The Vasion Print Virtual Appliance Host and Application contain a default admin account and an installation-time endpoint at...

10CVSS7.4AI score0.01225EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•20 views

PT-2025-31207 · Undefined · Undefined

A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script. The script remains accessible after deployment and fails to sanitize input before writing to the application’s config.php file. An unauthenticated...

9.3CVSS8.3AI score0.0231EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/05/23 4:07 a.m.•13 views

CVE-2023-38356

MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers to achieve remote code execution through a man in the middle attack...

8.1CVSS7.8AI score0.00767EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/05 6:15 a.m.•43 views

CVE-2025-27645

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005...

9.8CVSS0.009EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/03/05 12:00 a.m.•9 views

PT-2025-9752 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 Description: The issue allows for insecure extension installation by trusting HTTP permission methods on the server side...

9.8CVSS9.3AI score0.009EPSS
SaveExploits1References7
Rows per page
Query Builder