Lucene search
+L

7663 matches found

UbuntuCve
UbuntuCve
added 2022/09/21 7:15 p.m.33 views

CVE-2022-23952

In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...

7.5CVSS7.1AI score0.01161EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/09/21 6:25 p.m.28 views

CVE-2022-23952

In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...

8.8AI score0.01161EPSS
SaveExploits1References3
CVE
CVE
added 2022/09/21 6:25 p.m.65 views

CVE-2022-23952

CVE-2022-23952 affects Keylime before version 6.3.0, where the installer writes the keylime.conf file with world-readable permissions, potentially exposing sensitive data contained in that config. The root cause is improper file permissions during installation, as described across multiple adviso...

7.5CVSS8.5AI score0.01161EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/09/21 6:25 p.m.21 views

CVE-2022-23952

In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable...

7.5CVSS6.8AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:00 a.m.10 views

The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, allows a hacker to execute arbitrary code or enhance their privileges on Windows operating systems.

The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, exists on Windows operating systems. It involves the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code or increase their privilege...

8.2CVSS7.6AI score0.00346EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2022/09/19 8:27 p.m.14 views

Buffer Overflow

freeciv, sid is vulnerable to buffer overflow.This vulnerability exits in the modpack installer due to the handling of the modpack url which allows an attacker to cause memory corruption...

8.8CVSS8.3AI score0.01242EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/09/19 6:15 p.m.8 views

CVE-2022-38764

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...

7.8CVSS5.8AI score0.00213EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/19 6:15 p.m.3 views

CVE-2022-38764

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...

7.8CVSS5.8AI score0.00213EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/09/19 6:15 p.m.14 views

CVE-2022-38764

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...

7.8CVSS0.00213EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/19 6:15 p.m.247 views

Design/Logic Flaw

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...

4.3CVSS7.5AI score0.00213EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/19 6:01 p.m.21 views

CVE-2022-38764

A vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local attacker to escalate privlieges due to an overly permissive folder om the product installer...

7.8AI score0.00213EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/19 4:15 p.m.9 views

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

7.8CVSS5.8AI score0.00258EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/19 4:15 p.m.5 views

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

7.8CVSS7.1AI score0.00258EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/09/19 4:15 p.m.29 views

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

7.8CVSS0.00258EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/19 4:15 p.m.22 views

Design/Logic Flaw

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

4.4CVSS7.6AI score0.00258EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/09/19 4:05 p.m.348 views

CVE-2022-40978

JetBrains IntelliJ IDEA installer prior to 2022.2.2 is vulnerable to EXE search order hijacking due to an uncontrolled search path in installer executables. This could allow local attackers to execute arbitrary code during installation. Red Hat and PT Security corroborate the same issue, with rem...

7.8CVSS7.5AI score0.00258EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/19 4:05 p.m.27 views

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

7.5CVSS7.8AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/09/19 12:00 a.m.10 views

Trend Micro HouseCall 安全漏洞

Trend Micro HouseCall is a free scanning program from Trend Micro. Use a simple one-click scan to detect all devices connected to your home network and check them for security risks. A security vulnerability exists in Trend Micro HouseCall 1.62.1.1133 and prior versions, which stems from an...

7.8CVSS7.3AI score0.00213EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/19 12:00 a.m.11 views

JetBrains IntelliJ IDEA 代码问题漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.2.2, which stems from the vulnerability of the installer to an EXE search command...

7.8CVSS7.3AI score0.00258EPSS
SaveExploits0References2
NVD
NVD
added 2022/09/08 8:15 a.m.21 views

CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

7.8CVSS0.00212EPSS
SaveExploits0References2
Rows per page
Query Builder