3 matches found
UBUNTU-CVE-2026-0864
When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value...
4.1CVSS5.8AI score0.00139EPSS
SaveExploits0References2
CVE-2023-28870
Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to configuration files from low-privileged user accounts...
6.5CVSS5.8AI score0.00701EPSS
SaveExploits1References1
check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4
CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write checkmk config files .mk files to arbitrary locations via vectors related to row selections...
4.9CVSS5.9AI score0.01785EPSS
SaveExploits0References4
20