4324 matches found
htsjdk 安全漏洞
htsjdk is a samtools open source a Java API for high-throughput sequencing data HTS format . An authorization issue exists in htsjdk 3.0.1 and earlier versions com.github.samtools.The vulnerability is due to the createTempDir function in util/IOUtil, which creates a temporary file in a directory...
CVE-2022-45307
Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder...
CVE-2022-45304
Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\Cmder and all files located in that folder...
PT-2022-27464 · Microsoft · Chocolatey Azure-Pipelines-Agent
Name of the Vulnerable Software and Affected Versions: Chocolatey Azure-Pipelines-Agent versions 2.211.1 and below Description: The issue is related to insecure permissions in the Chocolatey Azure-Pipelines-Agent package, which grants all users in the Authenticated Users group write privileges fo...
CVE-2022-45301
Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\ruby31 and all files located in that folder...
CVE-2022-45304
Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\Cmder and all files located in that folder...
CVE-2022-45306
CVE-2022-45306 affects Chocolatey Azure-Pipelines-Agent package versions 2.211.1 and earlier. The vulnerability is insecure permissions: all users in the Authenticated Users group have write privileges to the subfolder C:\agent and all files within. This is documented across multiple sources (Red...
CVE-2022-45305
Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\Python311 and all files located in that folder...
PT-2022-27462 · Chocolatey · Cmder
Name of the Vulnerable Software and Affected Versions: Chocolatey Cmder package versions 1.3.20 and below Description: The issue is related to insecure permissions in the Chocolatey Cmder package, which grants all users in the Authenticated Users group write privileges for the path C:toolsCmder a...
CVE-2022-45307
The CVE-2022-45307 issue affects Chocolatey PHP package versions 8.1.12 and below. It stems from insecure permissions that grant all users in the Authenticated Users group write access to the subfolder C:\tools\php81 and all files within it. Documented impact indicates this could enable unauthori...
PT-2022-27461 · Chocolatey · Chocolatey Ruby Package
Name of the Vulnerable Software and Affected Versions: Chocolatey Ruby package versions 3.1.2.1 and below Description: The issue is related to insecure permissions in the Chocolatey Ruby package, which grants all users in the Authenticated Users group write privileges for the path C:toolsruby31 a...
CVE-2022-45301
CVE-2022-45301 affects Chocolatey Ruby package versions 3.1.2.1 and earlier, where the directory C:\tools\ruby31 and all files within are writable by all users in the Authenticated Users group due to insecure permissions. The connected sources (Red Hat, CNVD/CNNVD, NVD, CVE listing, and vulnerabi...
CVE-2022-45301
Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\ruby31 and all files located in that folder...
CVE-2022-45305
CVE-2022-45305 describes insecure permissions in the Chocolatey Python3 package (versions 3.11.0 and below), where all users in the Authenticated Users group have write access to the subfolder C:\Python311 and all files within. This can allow unauthorized modification of files in that directory. ...
Creation of Temporary File in Directory with Insecure Permissions
Overview com.github.samtools:htsjdk is a Java API for high-throughput sequencing data HTS formats Affected versions of this package are vulnerable to Creation of Temporary File in Directory with Insecure Permissions. due to the createTempDir function in util/IOUtil.java not checking for the...
Creation of Temporary File With Insecure Permissions
Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions. A knowledgeable local user can locate temporary files created when a scheduled file is read. While they are in use, the user will be able to read the schedule being processed by MPXJ...
CVE-2022-41954
MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems not Windows or macos, MPXJ's use of File.createTempFile.. results in temporary files being created with the permissions -rw-r--r--. This means that any other...
CVE-2022-41954 Temporary File Information Disclosure Vulnerability
MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems not Windows or macos, MPXJ's use of File.createTempFile.. results in temporary files being created with the permissions -rw-r--r--. This means that any other...
PT-2022-27529 · Unknown · Drachtio-Server
Name of the Vulnerable Software and Affected Versions: drachtio-server version 0.8.18 Description: The issue concerns the permissions of the /var/log/drachtio directory and the drachtio.log file. Specifically, the directory has a mode of 0777 and the log file has a mode of 0666. This could...