CVE-2021-42205

CVE-2021-42205 ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice. authentication| complexity| vector ---|---|--- not...

CVE-2026-124848

Incorrect default file permissions in Kiro CLI formerly Amazon Q Developer CLI before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain. The CLI created it...

CVE-2026-124848

Incorrect default file permissions in Kiro CLI formerly Amazon Q Developer CLI before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain. The CLI created it...

EUVD-2026-122885

Incorrect default file permissions in Kiro CLI formerly Amazon Q Developer CLI before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain. The CLI created it...

CVE-2026-124848

The Kiro CLI (formerly Amazon Q Developer CLI) versions prior to 2.27.0 on macOS and Linux are vulnerable to incorrect default file permissions (CWE-276 ). The CLI creates local session storage files with permissions that allow other local users on the same host to read session transcripts and pr...

CVE-2026-123505

Vikunja versions prior to 2.7.1 are vulnerable to an insecure file permissions flaw. The localStorage.Write function creates blobs that are world-readable , allowing local users on shared hosts to access sensitive data. Impacted information includes attachments , project backgrounds , and exports...

CVE-2026-123505 Vikunja before 2.7.1 World-Readable Local File Storage and SQLite Database

Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read stored data because localStorage.Write creates blobs world-readable. Local attackers on a shared host can read attachments, project backgrounds and exports, and copy the SQLite database to cra...

CVE-2026-123505 Vikunja before 2.7.1 World-Readable Local File Storage and SQLite Database

Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read stored data because localStorage.Write creates blobs world-readable. Local attackers on a shared host can read attachments, project backgrounds and exports, and copy the SQLite database to cra...

CVE-2026-124039

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039

Gitleaks versions through 8.30.1 are affected by an incorrect permission assignment vulnerability (CWE-732). The root cause is located in cmd/root.go, where the --report-path file is created using os.Create with default permissions. This allows other local users on shared hosts or CI runners to r...

CVE-2026-124039

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039 Gitleaks through 8.30.1 World-Readable Report Files via --report-path

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

EUVD-2026-118440

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039 Gitleaks through 8.30.1 World-Readable Report Files via --report-path

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039 Gitleaks through 8.30.1 World-Readable Report Files via --report-path

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

EUVD-2026-118042

In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux...

PT-2026-138411

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-124039: gitleaks: Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan…

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can...

CVE-2026-121003

A flaw was found in Epiphany. An information disclosure vulnerability allows local users to discover websites visited during private browsing sessions. When a user selects the "Always Allow" option for external URL schemes while in incognito mode, Epiphany stores the visited domain into the user'...

CLEANSTART-2024-BB62367 flaw was found in the way Samba maps domain users to local users

Security vulnerability affects the samba package. A flaw was found in the way Samba maps domain users to local users...