Lucene search
K

10 matches found

OSV
OSV
added 2026/04/14 1:10 p.m.1 views

JLSEC-2026-111 Deno's --deny-write check does not prevent permission bypass

Summary Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtime times on the file stream resource even when the file is opened with read only permission...

3.3CVSS5.7AI score0.0018EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000736 advisory. fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount o...

6.2CVSS7AI score0.00888EPSS
Exploits6References15
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002230 advisory. fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount o...

6.2CVSS7AI score0.00888EPSS
Exploits6References15
OSV
OSV
added 2025/10/08 12:37 a.m.5 views

CVE-2025-61785 Deno's --deny-write check does not prevent permission bypass

Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtim...

3.3CVSS4.2AI score0.0018EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2024/12/06 12:0 a.m.6 views

PT-2025-3620

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises from ksmbd attempting to set atime and mtime via notify change without also setting ctime, resulting in a warning. This warning is triggered by the setattr copy function. The...

5.5CVSS7.1AI score0.00202EPSS
Exploits0
OSV
OSV
added 2023/08/22 9:53 a.m.8 views

SUSE-RU-2023:3370-1 Recommended update for rsync

This update for rsync fixes the following issues: - Update to version 3.2.3 jscSLE-21252, jscPED-3146 - Add support for using --atimes to preserve atime of files in destination sync jscPED-3145 - Remove SuSEfirewall2 service as this was replaced by firewalld which already provides a rsyncd servic...

7.4CVSS7.6AI score0.0165EPSS
Exploits1References6
OSV
OSV
added 2014/08/18 11:15 a.m.2 views

DEBIAN-CVE-2014-5207

fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, ...

6.2CVSS5.8AI score0.00888EPSS
Exploits6References1
OSV
OSV
added 2014/08/13 12:0 a.m.2 views

UBUNTU-CVE-2014-5207

fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, ...

6.2CVSS6.7AI score0.00888EPSS
Exploits6References6
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.46 views

openSUSE Security Update : samba (openSUSE-SU-2014:0404-1)

"Samba was updated to 4.1.6, fixing bugs and security issues : - Password lockout not enforced for SAMR password changes, this allowed brute forcing of passwords; CVE-2013-4496; bnc849224. - smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; bnc855866. Also the following bugs...

5.8CVSS7.3AI score0.10557EPSS
Exploits1References26
OpenVAS
OpenVAS
added 2013/03/11 12:0 a.m.39 views

SuSE Update for kernel openSUSE-SU-2013:0395-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201303951.nasl 8526 2018-01-25 06:57:37Z teissa $ SuSE Update for kernel openSUSE-SU-2013:0395-1 kernel Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

7.2CVSS0.4AI score0.0418EPSS
Exploits20References2
Rows per page
Query Builder