CVE-2024-51765: Incorrect Default Permissions

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on configuration, this vulnerability may lead to local/cluster unauthorized access...

PRIMX CRYHOD 安全漏洞

PRIMX CRYHOD is a PRIMX company used to enable companies to protect employee devices taken off premises in accordance with global management policies. A security vulnerability exists in PRIMX CRYHOD 2024.3 and earlier versions, which stems from the fact that by default dedicated folders can be...

CVE-2024-46467: Incorrect Default Permissions

By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONEPOINT has to be modified to prevent this vulnerability...

CVE-2024-46465: Incorrect Default Permissions

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability...

PRIMX ORIZON 安全漏洞

PRIMX ORIZON is a multi-platform software from PRIMX Corporation that encrypts files and folders stored at a cloud service provider. A security vulnerability exists in PRIMX ORIZON version 2024.3 and earlier, which stems from the fact that by default dedicated folders can be accessed by other use...

Cisco Industrial Network Director 安全漏洞

Cisco Industrial Network Director IND is an industrial automation management system from the American company Cisco. The system automates the management of industrial Ethernet infrastructure by visualizing its operation. Cisco Industrial Network Director has a security vulnerability that stems fr...

PRIMX ZEDMAIL 安全漏洞

PRIMX ZEDMAIL is an enterprise messaging application encryption solution from PRIMX Corporation. A security vulnerability exists in PRIMX ZEDMAIL version 2024.3 and earlier, which stems from the fact that by default dedicated folders can be accessed by other users to misuse technical files and...

Security update for buildah

This update for buildah fixes the following issues: CVE-2024-9676: Fixed github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service DoS bsc1231698: CVE-2024-9675: VUL-0: CVE-2024-9675: buildah,podman: buildah: cache arbitrary...

Baxter Life2000 安全漏洞

Baxter Life2000 is a mask-less non-invasive ventilator from Baxter. A security vulnerability exists in Baxter Life2000 version 06.08.00.00 and prior versions, which originated when enabled by default, that allows sending and receiving of unencrypted messages, which could result in unauthorized...

Fedora 37 : git (2022-fb088df94c)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-fb088df94c advisory. Upstream update including security & bug fixes as well as feature enhancements. From the upstream release notes: CVE-2022-39253 -------------- When...

Fedora 37 : qemu (2022-4387579e67)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-4387579e67 advisory. vga: avoid crash if no default vga card rhbz2095639 lsi53c895a: fix use-after-free in lsidomsgout CVE-2022-0216 vnc-clipboard: fix integer underflow...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-29083

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-25647

Incorrect default permissions for some IntelR Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

UBUNTU-CVE-2024-21820

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-35201

Intel SDP Tool for Windows (all versions) is affected by CVE-2024-35201, caused by incorrect default permissions that may allow an authenticated local user to escalate privileges. The Intel advisory (Intel SA-01179) notes a product discontinuation and that no updates will be released; Intel recom...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-29083

CVE-2024-29083 concerns Intel® Distribution for Python software before version 2024.2, where incorrect default permissions may allow an authenticated user to escalate privileges via local access. The advisory and related records describe affected product: Intel Distribution for Python before 2024...

CVE-2024-29083

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...