Lucene search
+L

5 matches found

Snyk
Snyk
added 2026/07/17 6:41 p.m.9 views

Improper Check for Dropped Privileges

Overview sh is a Python subprocess replacement Affected versions of this package are vulnerable to Improper Check for Dropped Privileges in the uid process. An attacker can gain unauthorized access to files or resources associated with privileged supplementary groups by launching a subprocess fro...

8.3CVSS5.4AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/22 5:32 a.m.8 views

Improper Check for Dropped Privileges

Overview Affected versions of this package are vulnerable to Improper Check for Dropped Privileges due to the omission of constraint extensions such as [email protected] when adding a key to a remote agent. An attacker can bypass intended key usage restrictions by forwarding ke...

9.1CVSS5.8AI score0.006EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/16 12:0 a.m.14 views

Siemens SIMATIC S7-1500 Improper Check for Dropped Privileges (CVE-2025-39798)

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automounting a new filesystem Capabilities cannot be inherited when we cross into a new filesystem. They need to be reset to the minimal defaults, and then probed for again. This plugin...

7.3CVSS5.6AI score0.00251EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.6 views

Siemens SIMATIC S7-1500 Improper Check for Dropped Privileges (CVE-2019-18276)

An issue was discovered in disableprivmode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems th...

7.8CVSS7AI score0.02608EPSS
SaveExploits5References3
ICS
ICS
added 2024/10/10 6:0 a.m.22 views

Rockwell Automation DataMosaix Private Cloud

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : DataMosaix Private Cloud Vulnerabilities : Inadequate Encryption Strength, Out-of-bounds Write, Improper Check for Dropped Privileges, Reliance on...

9.8CVSS9.1AI score0.09116EPSS
SaveExploits6References10
Rows per page
Query Builder