Lucene search
+L

1536 matches found

OSV
OSV
added 2022/02/19 2:15 a.m.4 views

CVE-2022-25365

Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774...

7.8CVSS6.8AI score0.00845EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/15 4:15 a.m.6 views

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

4.3CVSS5.8AI score0.00845EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/15 3:35 a.m.16 views

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

6.7AI score0.00845EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/14 12:15 p.m.11 views

AZL-8577 CVE-2021-44879 affecting package kernel for versions less than 5.15.26.1-1

In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference...

5.5CVSS6.7AI score0.01234EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/14 12:15 p.m.2 views

DEBIAN-CVE-2021-44879

In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference...

5.5CVSS6.3AI score0.01234EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/09 9:59 p.m.4 views

GHSA-X7JH-595Q-WQ82 Incorrect Permission Assignment for Critical Resource in Ansible

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

4.8CVSS6.7AI score0.00405EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2022/02/09 9:59 p.m.32 views

Incorrect Permission Assignment for Critical Resource in Ansible

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS5.1AI score0.00405EPSS
SaveExploits1References8Affected Software1
AlmaLinux
AlmaLinux
added 2022/02/01 8:03 p.m.28 views

resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed...

2.1AI score
SaveExploits0
Rockylinux
Rockylinux
added 2022/02/01 8:03 p.m.12 views

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

1.3AI score
SaveExploits0
OSV
OSV
added 2022/02/01 8:03 p.m.9 views

ALBA-2022:0347 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed...

7AI score
SaveExploits0
OSV
OSV
added 2022/02/01 6:15 a.m.9 views

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

5.3CVSS6.6AI score0.00926EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/01 6:15 a.m.7 views

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

5.3CVSS6.8AI score0.00926EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/01 6:15 a.m.27 views

CVE-2022-23774

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

5.3CVSS0.00926EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.20 views

Mageia: Security Advisory (MGASA-2019-0214)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.8AI score0.0184EPSS
SaveExploits0References4
CVE
CVE
added 2021/12/15 6:37 a.m.53 views

CVE-2021-40827

CVE-2021-40827 affects Clementine Music Player up to version 1.3.1 when a GLib 2.0.0 DLL is used. The issue is a Read Access Violation in the MP3 parsing path (Block Data Move) at memcpy+0x265, triggered by opening a crafted MP3 or mishandled remote stream. Exploitation could crash the Clementine...

7.8CVSS7.8AI score0.01181EPSS
SaveExploits1References1Affected Software1
RedHat Linux
RedHat Linux
added 2021/12/02 10:04 p.m.8 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/12/02 6:37 p.m.8 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/12/01 12:28 p.m.11 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/11/29 10:40 a.m.11 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
Oracle linux
Oracle linux
added 2021/11/19 12:00 a.m.64 views

resource-agents security update

4.1.1-98 - storage-mon: new resource agent Resolves: rhbz1509319 4.1.1-97 - podman: fix possible race during container creation Resolves: rhbz1972743 4.1.1-96 - LVM-activate: fix drop-in check to avoid re-creating drop-in Resolves: rhbz1972035 4.1.1-95 - lvmlockd: remove cmirrord support, as...

7.5CVSS7.9AI score0.03906EPSS
SaveExploits1
Rows per page
Query Builder