4324 matches found
CVE-2023-39003
OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions in the directory /tmp...
CVE-2023-39005
OPNsense CVE-2023-39005: Insecure permissions for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2. This misconfiguration can expose high-confidentiality data access risk (per CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base score 7.5). Publicly docu...
PT-2023-26730 · Opnsense · Opnsense Community Edition +1
Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: The issue is related to insecure permissions in the configuration directory /conf/ of OPNsense, allowing attackers to access...
CVE-2023-39003
CVE-2023-39003 affects OPNSense Community Edition < 23.7 and OPNSense Business Edition
CVE-2023-39004
Insecure permissions in the configuration directory /conf/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information e.g., hashed root password which could lead to privilege escalation...
CVE-2023-39003
OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions in the directory /tmp...
PT-2024-12816 · Mariadb Foundation +1 · Mariadb +1
Name of the Vulnerable Software and Affected Versions: MariaDB version 10.5 Description: Insecure permissions in the sys exec function of MariaDB allow authenticated attackers to execute arbitrary commands with elevated privileges. This issue is disputed by the MariaDB Foundation because no...
3s-smart Software Solutions CODESYS Development System 安全漏洞
3s-smart Software Solutions CODESYS Development System is a suite of programming tools for use in the field of industrial controllers and automation technology from 3s-smart Software Solutions, Germany. A security vulnerability exists in the CODESYS Development System that stems from an insecure...
CVE-2023-26077
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions...
CVE-2023-26077
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions...
CVE-2023-26077
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions...
Directory traversal
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions...
PT-2023-20473 · Atera · Atera Agent
Name of the Vulnerable Software and Affected Versions: Atera Agent versions 1.8.3.6 and earlier Description: The issue is related to the creation of a temporary file in a directory with insecure permissions. This occurs in Atera Agent on Windows. Recommendations: For Atera Agent versions 1.8.3.6...
CVE-2023-26077
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions...
CVE-2023-26077
Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions...
CVE-2023-26077
The CVE-2023-26077 issue affects Atera Agent for Windows (versions 1.8.3.6 and earlier). It arises from the MSI installer’s repair functionality creating temporary files in directories with insecure permissions, enabling potential local privilege escalation (e.g., via DLL hijacking) when exploite...
CVE-2022-44719
An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions...
CVE-2022-44719
An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions...