61 matches found
EUVD-2009-1625
Malware in sbrugna...
ncurses security update
6.2-10.20210508.el96.2 - remove execute permissions from ANNOUNCE file RHEL-102738 6.2-10.20210508.el96.1 - guard against corrupt terminfo data in string conversion CVE-2022-29458 RHEL-100139...
Oracle Linux 9 : ncurses (ELSA-2025-12876)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12876 advisory. 6.2-10.20210508.el96.2 - remove execute permissions from ANNOUNCE file RHEL-102738 6.2-10.20210508.el96.1 - guard against corrupt terminfo data in string...
CVE-2020-24716
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...
CVE-2025-20233
In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...
CVE-2021-46928
In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale IIR value on instruction access rights trap When a trap 7 Instruction access rights occurs, this means the CPU couldn't execute an instruction due to missing execute permissions on the memory region. In this...
CVE-2021-46928
CVE-2021-46928 affects the Linux kernel on parisc: a trap7 (Instruction access rights) could leave the cr19 IIR register with a stale value. The patch fixes this by overwriting the stale IIR with the constant 0xbaadf00d when the trap occurs, preventing confusing dump values. The issue arises beca...
Google Pixel 安全漏洞
Google Android is a free and open source operating system based on the Linux kernel without GNU components. An information disclosure vulnerability exists in revokeOwnPermissionsOnKill in PermissionManager.java in Google Android version 13.0, which stems from the program not properly checking que...
CVE-2022-3421
An attacker can pre-create the /Applications/Google\ Drive.app/Contents/MacOS directory which is expected to be owned by root to be owned by a non-root user. When the Drive for Desktop installer is run for the first time, it will place a binary in that directory with execute permissions and set i...
CVE-2021-34387
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...
Design/Logic Flaw
The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is...
CVE-2020-24716
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...
CVE-2020-24716
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...
Design/Logic Flaw
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...
CVE-2020-24716
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...
CVE-2020-24716
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...
PT-2020-15827
Name of the Vulnerable Software and Affected Versions OpenZFS versions prior to 2.0.0-rc1 Description The issue allows execute permissions for all directories when OpenZFS is used on FreeBSD. Recommendations For versions prior to 2.0.0-rc1, update to version 2.0.0-rc1 or later to resolve the issu...
CVE-2020-24716: Incorrect Authorization
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...
Shadow CVE-2019-19882 Multiple Local Privilege Escalation Vulnerabilities
Description Shadow is prone to multiple local privilege-escalation vulnerabilities. A local attacker can exploit these issues to gain elevated privileges. Shadow 4.8 is vulnerable; other versions may also be affected. Technologies Affected Shadow-Maint Shadow 4.8 Recommendations Permit local acce...
PT-2018-16488
Name of the Vulnerable Software and Affected Versions Swift versions prior to 4.1.1 Security Update 2018-001 Description The issue involves the "Swift for Ubuntu" component and allows attackers to execute arbitrary code in a privileged context. This is possible because write and execute permissio...