PT-2025-34266

Name of the Vulnerable Software and Affected Versions: Agent-Zero versions 0.8.0 through 0.8.9 Description: Insecure permissions in Agent-Zero allow attackers to arbitrarily reset the system via unspecified vectors. Recommendations: At the moment, there is no information about a newer version tha...

CVE-2025-55524

CVE-2025-55524 concerns Agent-Zero, versions 0.8.0 through 0.8.9 , where insecure permissions allow an attacker to arbitrarily reset the system via unspecified vectors. Root cause cited as improper permissions in Agent-Zero v0.8.*. Public docs do not specify a concrete vulnerable component, explo...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

Linux Distros Unpatched Vulnerability : CVE-2018-1000071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This...

The vulnerability of the RESTEasy software lies in the creation of temporary files with insecure permissions, allowing a hacker to access confidential information.

The vulnerability of the RESTEasy software lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to access confidential information...

CVE-2025-38747

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2024-55398

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions...

CVE-2025-7195

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...

CVE-2025-7195 Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...

CVE-2025-7195

Technical details about CVE-2025-7195 are not publicly available in the provided documents; monitor for updates.

CVE-2025-7195

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, usersetup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used...

Linux Distros Unpatched Vulnerability : CVE-2020-25039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution. CVE-2020-25039...

Lighthouse data GPMAW 14 安全漏洞

Lighthouse data GPMAW 14 is a program for detailed analysis of the primary structure of proteins and peptides from Lighthouse data, Denmark. A security vulnerability exists in the Lighthouse data GPMAW 14 version that stems from insecure file permissions that could lead to elevated privileges...

CVE-2024-55398

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions...

CVE-2024-55398

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions...

CVE-2025-38747

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2025-38747

Dell SupportAssist OS Recovery is affected in versions prior to 5.5.14.0 by a Creation of Temporary File With Insecure Permissions vulnerability that could allow a local authenticated attacker to elevate privileges. The connected documents substantiate the affected product and root cause, and one...

PT-2025-32203

Name of the Vulnerable Software and Affected Versions Dell SupportAssist OS Recovery versions prior to 5.5.14.0 Description Dell SupportAssist OS Recovery contains a Creation of Temporary File With Insecure Permissions issue. A local authenticated attacker could potentially exploit this issue,...

CVE-2024-55398

4C Strategies Exonaut before v22.4 is affected by insecure permissions. The issue stems from improperly set permissions in versions prior to 22.4. Documents corroborate this vulnerability across multiple sources (NVD/Red Hat/CNNVD), but do not provide exploitable details or specific attack vector...

PT-2025-32206 · 4C Strategies · 4C Strategies Exonaut

Name of the Vulnerable Software and Affected Versions: 4C Strategies Exonaut versions prior to 22.4 Description: The 4C Strategies Exonaut software was found to have insecure permissions. Recommendations: Update to version 22.4 or later...