Lucene search
+L

55 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/24 12:00 a.m.•7 views

FreeBSD : vifm -- Unverified Ownership (158544f8-cf02-11f1-b0f1-d0f4051da3a3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 158544f8-cf02-11f1-b0f1-d0f4051da3a3 advisory. https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SkX7Pmiofg reports: Vifm 0.8.1-beta through 0.14.4 reuses a...

7.3CVSS6.3AI score0.00149EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/10/20 4:59 p.m.•9 views

Unverified Ownership

Overview Affected versions of this package are vulnerable to Unverified Ownership via the strict lock implementation in strict.py and related claim directory handling, where mkdirmode=0o700 only enforces private permissions when it creates the directory and the subsequent lstat check reads neithe...

6.3CVSS5.6AI score0.00148EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-93853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots...

7.2CVSS5.5AI score0.00207EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/29 9:19 p.m.•26 views

DEBIAN-CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

7.2CVSS5.6AI score0.00207EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 9:19 p.m.•15 views

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

7.2CVSS0.00207EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/29 9:19 p.m.•17 views

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

7.2CVSS5.6AI score0.00207EPSS
SaveExploits0References2
Mend
Mend
•added 2026/09/29 8:55 p.m.•13 views

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

9.6CVSS5.6AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 8:55 p.m.•31 views

CVE-2026-93853

The Barman backup tool is vulnerable to unverified ownership during snapshot backup deletion, affecting versions up to and including 3.20.0 (specifically versions from 3.4.0 for Google Cloud, 3.6.0 for Azure, and 3.7.0 for AWS). The root cause is that Barman reads snapshot identifiers from the ba...

7.2CVSS5.6AI score0.00207EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•12 views

CVE-2026-93853: Unverified Ownership

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

7.2CVSS5.6AI score0.00207EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/10 6:45 p.m.•8 views

Unverified Ownership

Overview awslabs.security-agent-mcp-server is an An AWS Labs Model Context Protocol MCP server for AWS Security Agent — automated security scanning, penetration testing, and remediation Affected versions of this package are vulnerable to Unverified Ownership via the S3 bucket ownership verificati...

5.9CVSS5.8AI score0.00441EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 5:18 p.m.•46 views

CVE-2026-84386

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

5.1CVSS0.00143EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 4:41 p.m.•59 views

EUVD-2026-72921

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

5.1CVSS5.8AI score0.00143EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 4:41 p.m.•162 views

CVE-2026-84386

CVE-2026-84386 is an unverified ownership vulnerability in Fortinet FortiClient for Windows , affecting versions 7.4.0 through 7.4.7 and all versions of the 7.2 line. The flaw may allow an attacker to bypass access control , resulting in low integrity and high availability impact. The CVSS 3.1 sc...

5.1CVSS5.8AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 4:41 p.m.•77 views

CVE-2026-84386

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

5.1CVSS0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•38 views

PT-2026-87178

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...

5.1CVSS5.8AI score0.00143EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•15 views

CVE-2026-84386: Unverified Ownership

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...

5.1CVSS5.9AI score0.00143EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/04 7:17 p.m.•32 views

CVE-2026-85781

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

8.7CVSS0.00443EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/04 6:49 p.m.•24 views

EUVD-2026-71692

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

8.7CVSS5.8AI score0.00443EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/04 6:49 p.m.•51 views

CVE-2026-85781 Unverified access point ownership in Amazon EFS CSI Driver

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4.1 might allow an authenticated Kubernetes user with PersistentVolume creation privileges to cause recursive deletion of directories on an EFS filesystem they are not authorized...

5CVSS5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•37 views

PT-2026-86236

Name of the Vulnerable Software and Affected Versions Amazon EFS CSI Driver versions prior to v3.4.1 Description The volume deletion component fails to verify the ownership of a storage access point. This allows an authenticated Kubernetes user with PersistentVolume creation privileges to trigger...

8.7CVSS5.8AI score0.00443EPSS
SaveExploits0References5
Rows per page
Query Builder