Lucene search
K

41 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.6 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting the ACL. A NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL later. It finds that the ACL is only a default ACL based on the mode bits, not the...

5.3AI score0.00043EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/13 3:29 p.m.19 views

CVE-2025-68803 NFSD: NFSv4 file creation neglects setting ACL

In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL based on the mode bits and not the...

0.00043EPSS
Exploits0References7
OSV
OSV
added 2025/10/16 8:5 p.m.4 views

CLSA-2025-1760645131 Fix of 11 CVEs

CVE-url: https://ubuntu.com/security/CVE-2022-43945 - NFSD: Protect against send buffer overflow in NFSv3 READ CVE-url: https://ubuntu.com/security/CVE-2025-21796 - nfsd: clear aclaccess/acldefault after releasing them CVE-url: https://ubuntu.com/security/CVE-2022-48827 - NFSD: Fix the behavior o...

7.8CVSS7.1AI score0.00223EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-5592

Malware in sbrugna...

8.5CVSS6.1AI score0.00389EPSS
Exploits0References8
NVD
NVD
added 2025/10/01 11:15 a.m.3 views

CVE-2025-10847

DX Unified Infrastructure Management Nimsoft/UIM and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

8.4CVSS0.00187EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/01 10:48 a.m.8 views

CVE-2025-10847 DX UIM Probe Improper ACL Handling RCE

DX Unified Infrastructure Management Nimsoft/UIM and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

8.4CVSS0.00187EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:50 p.m.4 views

CVE-2020-8010

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

10CVSS7AI score0.80938EPSS
Exploits4References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-10396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uninitialized memory, and...

6.5CVSS5.6AI score0.00185EPSS
Exploits0References2
OSV
OSV
added 2025/02/27 3:15 a.m.1 views

DEBIAN-CVE-2025-21796

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

7.8CVSS5.7AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2025/02/27 3:15 a.m.8 views

CVE-2025-21796

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

7.8CVSS0.00014EPSS
Exploits0References11
Debian CVE
Debian CVE
added 2025/02/27 2:18 a.m.6 views

CVE-2025-21796

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

7.8CVSS5.7AI score0.00014EPSS
Exploits0
OSV
OSV
added 2022/05/01 6:5 p.m.4 views

GHSA-CMG7-XR2J-4R9V MoinMoin Improper ACL handling for calendars and includes

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors...

5CVSS6.3AI score0.00596EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2022/05/01 6:5 p.m.18 views

MoinMoin Improper ACL handling for calendars and includes

MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors...

5CVSS7.1AI score0.00596EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2022/01/22 11:3 a.m.1 views

OESA-2022-1494 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

7.8CVSS6.9AI score0.00042EPSS
Exploits0References3
NVD
NVD
added 2020/02/18 4:15 a.m.10 views

CVE-2020-8010

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

10CVSS9.4AI score0.80938EPSS
Exploits4References3
Prion
Prion
added 2020/02/18 4:15 a.m.13 views

Input validation

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

10CVSS9.4AI score0.80938EPSS
Exploits4References3Affected Software1
Cvelist
Cvelist
added 2020/02/18 3:11 a.m.23 views

CVE-2020-8010

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

9.5AI score0.80938EPSS
Exploits4References3
CVE
CVE
added 2020/02/18 3:11 a.m.162 views

CVE-2020-8010

CVE-2020-8010 affects CA Unified Infrastructure Management (Nimsoft/UIM) robot/controller components across 9.20 and earlier, and 20.1/20.3.x. The issue is improper ACL handling, enabling a remote attacker to execute commands and perform read/write on the target system. Public details in the conn...

10CVSS9.3AI score0.80938EPSS
Exploits4References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/03/17 12:0 a.m.32 views

RHEL 6 / 7 : samba (RHSA-2016:0447)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0447 advisory. Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible...

6.5CVSS6.7AI score0.03995EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2016/03/16 12:0 a.m.29 views

CentOS Update for samba4 CESA-2016:0449 centos6

Check the version of samba4 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882420";...

6.5CVSS6.6AI score0.03995EPSS
Exploits0References2
Rows per page
Query Builder