1063 matches found
Vivado™ Lab Solutions Vulnerability
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-0043| Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to escalate their privileges, potentially resulting in arbitrary co...
UBUNTU-CVE-2026-112908
filelock is a platform-independent file lock for Python. From version 3.30.0 until version 4.2.1, StrictSoftFileLock and AsyncStrictSoftFileLock on POSIX systems create coordination and claim directories without applying the caller’s restrictive lock mode. A permissive umask or inherited...
CVE-2026-112908
filelock is a platform-independent file lock for Python. From version 3.30.0 until version 4.2.1, StrictSoftFileLock and AsyncStrictSoftFileLock on POSIX systems create coordination and claim directories without applying the caller’s restrictive lock mode. A permissive umask or inherited...
ZeroTurnaround ZIP – convenience methods path traversal vulnerability
ZeroTurnaround ZIP – Convenience methods versions prior to 1.18.1 contain a path traversal vulnerability. This vulnerability arises because ZipUtil.unpack... applies the permissions associated with stored ZIP entries to the output directory when processing entry names such as / or ./. Path...
CLEANSTART-2024-XL27484 flaw was found in the way samba handled file and directory permissions
Security vulnerability affects the samba package. A flaw was found in the way samba handled file and directory permissions...
PT-2026-130562
Name of the Vulnerable Software and Affected Versions filelock versions 3.30.0 through 4.2.0 Description On POSIX systems, the StrictSoftFileLock and AsyncStrictSoftFileLock classes create coordination and claim directories using a bare mkdir call without applying the caller's restrictive lock...
Astra Linux – Vulnerability in Python-Django
A issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when Python 3.7+ was used. The FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created during file uploads. It was also not applied to intermediate-level static...
CVE-2026-89282
The Apache Lounge Windows distribution of the Apache HTTP Server contains an insecure installation directory permissions vulnerability. The issue stems from the default installation directory on **C:**, which incorrectly inherits write access for Authenticated Users . No specific remediation, exp...
EUVD-2026-84680
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...
CVE-2026-89282: Incorrect Permission Assignment for Critical Resource
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...
PT-2026-97015
Name of the Vulnerable Software and Affected Versions Apache Lounge Windows distribution of Apache HTTP Server affected versions not specified Description This issue involves insecure installation directory permissions within the default install directory on C:. The directory inherits write acces...
CVE-2026-69482
Windows Error Reporting contains a local tampering vulnerability caused by the creation of a temporary file in a directory with insecure permissions , allowing an authorized attacker to tamper with data locally. The vulnerability is rated CVSS 7.1 (HIGH) with a vector of local attack, low complex...
CVE-2026-59781
When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could...
CVE-2026-59781 Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.
When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could...
EUVD-2026-60742
When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could...
CVE-2026-59781
The Zabbix Agent on Windows is vulnerable to DLL sideloading because the installer fails to verify if a custom installation directory has secure access permissions. An attacker could exploit this by placing a malicious DLL in a directory with insecure permissions, which the application might subs...
Insecure Directory Permissions
org.springframework.data, spring-data-geode is vulnerable to Insecure Directory Permissions. The vulnerability is due to snapshot archives being extracted into predictable, permissive directories under the system temporary location, which allows a local attacker with basic privileges on a shared...
CVE-2025-0046
Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...