1817 matches found
CVE-2024-13206
A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit...
Incorrect Default Permissions
Overview Affected versions of this package are vulnerable to Incorrect Default Permissions due to insufficient permission enforcement in DirectoryOperations.cs when writing temporary files downloaded from stages to the OS temporary directory. A user with access to that world-readable directory ca...
Incorrect Default Permissions
org.jenkins-ci.plugins, oic-auth is vulnerable to Incorrect Default Permissions. The vulnerability is due to the Jenkins OpenId Connect Authentication Plugin improperly handling username case sensitivity, which allows attackers to bypass authentication mechanisms by submitting usernames that diff...
CVE-2025-0797
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...
CVE-2025-0797 MicroWorld eScan Antivirus Quarantine Microworld default permission
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...
CVE-2025-24482
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions...
CVE-2025-24482
Rockwell Automation FactoryTalk View Site Edition has a Local Code Injection vulnerability due to incorrect default permissions on the remote debugger port, affecting all versions prior to 15.0. Affected functionality includes DLLs being executed with elevated privileges, potentially enabling una...
CVE-2025-24482 FactoryTalk® View Site Edition - Local Code Injection
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions...
Rockwell Automation FactoryTalk View SE 安全漏洞
Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation, Inc. A security vulnerability exists in Rockwell Automation FactoryTalk View SE that stems from incorrect default permissions...
OESA-2025-1074 podman security update
Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in...
SUSE CVE-2025-23386
A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera to escalate to root.,This issue affects gerbera on openSUSE Tumbleweed before 2.5.0-1.1...
Xerox Workplace Suite 安全漏洞
Xerox Workplace Suite is a powerful print management software from Xerox. A security vulnerability exists in Xerox Workplace Suite version 5.6.701.9, which originates from weak default folder permissions...
Security update for apache2-mod_jk
This update for apache2-modjk fixes the following issues: Update to version 1.2.50: CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or denial of service. bsc1230916 Patch Instructions: To install this SUSE update use the SUSE...
USN-7211-1 audacity vulnerability
Mike Salvatore discovered that Audacity incorrectly handled default permissions of temporary files created by the application. An attacker could possibly use this issue to obtain sensitive information...
Security update for apache2-mod_jk
This update for apache2-modjk fixes the following issues: Update to version 1.2.50: CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or denial of service. bsc1230916 CVE-2023-41081: Fixed information disclosure in modjk. bsc1215301...
CVE-2024-13206 REVE Antivirus reveinstall default permission
A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit...
CVE-2024-13206 REVE Antivirus reveinstall default permission
A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit...
CVE-2024-13206
REVE Antivirus 1.0.0.0 on Linux is affected by CVE-2024-13206. The vulnerability concerns an unspecified portion of /usr/local/reveantivirus/tmp/reveinstall, where manipulation causes incorrect default permissions, enabling a local attack on the host. Public exploit details exist and the vendor w...
REVE Antivirus 安全漏洞
REVE Antivirus is an antivirus security program from REVE Antivirus, Inc. A security vulnerability exists in REVE Antivirus version 1.0.0.0, which originates from the file /usr/local/reveantivirus/tmp/reveinstall that results in incorrect default permissions...
CVE-2024-13188
A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...