4324 matches found
Information disclosure
Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...
CVE-2022-23802
Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...
CVE-2022-23802
CVE-2022-23802 affects Joomla Guru extension version 5.2.5. The root issue is insecure permissions that allow remote access to private information and viewing other users’ data, leading to information disclosure. Documented impact is information disclosure with remote exposure; there is no explic...
CVE-2022-23802 Extension - Insecure Permissions within Joomla Guru extensions
Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...
PT-2022-16274 · Unknown · Joomla Guru Extension
Name of the Vulnerable Software and Affected Versions: Joomla Guru extension version 5.2.5 Description: The issue allows for the obtainment of sensitive information remotely due to insecure permissions. This affects access to private information and components, making it possible to view other...
Directory traversal
This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure permissions that allow its contents to ...
CVE-2022-21230 Information Exposure
This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure permissions that allow its contents to ...
Trojan-Downloader.Win32.Small.ahlq Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/d859ba54086fd0313dc34b73b5b1eccb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Downloader.Win32.Small.ahlq Vulnerability: Insecure Permissions Description: the malware...
Trojan-Banker.Win32.Banker.heq Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/f15d05f74899324ecb61ee29ad162fad.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Banker.Win32.Banker.heq Vulnerability: Insecure Permissions Description: The malware writes a...
Virus.Win32.Qvod.b Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/c44a9580e17bad0aa27329e51b7d0ae0.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Qvod.b Vulnerability: Insecure Permissions Description: The malware writes a PE file wit...
Trojan-Downloader.Win32.Agent Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/fb3ac3c9d808de7f4b5ede68715f658f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Downloader.Win32.Agent Vulnerability: Insecure Permissions Description: The malware writes a ...
Trojan.Win32.TScash.c Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9d18d318e017b513b9c6cd193ccdc6ff.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.TScash.c Vulnerability: Insecure Permissions Description: The malware writes a PE file...
Email-Worm.Win32.Pluto.b Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/60a7d5e2d446110d84ef65f6a37af0eb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Pluto.b Vulnerability: Insecure Permissions Description: The malware writes a dir a...
Security Bulletin: IBM Maximo Asset Management is vulnerable to Insecure Permissions (CVE-2019-4446)
Summary IBM Maximo Asset Management is vulnerable to Insecure Permissions. Vulnerability Details CVEID: CVE-2019-4446 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user perform actions they are not authorized to by modifying request parameters. CVSS Base score: 5.4 CVSS...
CVE-2021-42255
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
Directory traversal
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
CVE-2021-42255
CVE-2021-42255 affects BeyondTrust AppGuard Enterprise (pre-6.7.100.1). The vulnerability arises because the repair operation uses a Temporary File created in a directory with insecure permissions in the unprivileged user’s %TEMP% folder, enabling local users to escalate to SYSTEM privileges. CVS...
CVE-2021-42255
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions, which allows a hacker to escalate their privileges.
The vulnerability of the Adobe Digital Editions e-book reading software relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges...