EUVD-2014-7173

Malware in sbrugna...

EUVD-2022-3344

Malicious code in bioql PyPI...

USN-6948-1 salt vulnerabilities

It was discovered that Salt incorrectly handled crafted web requests. A remote attacker could possibly use this issue to run arbitrary commands. CVE-2020-16846 It was discovered that Salt incorrectly created certificates with weak file permissions. CVE-2020-17490 It was discovered that Salt...

SUSE CVE-2019-19727

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions...

华为智能手机安全漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in a number of Huawei SmartPhones, which stems from a lack of effective permissions licensing and access control measures in the product. The vulnerability can be exploited by an attacker to cause the...

The vulnerability of the Windows Print Spooler service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Print Spooler service in Windows operating systems is related to insufficient control over access permissions. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

PYSEC-2020-250

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and thus permissions are not preserved...

PT-2019-13867 · Mitsubishi · Me-Rtu

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue allows an attacker to read sensitive configuration settings due to insecure permission assignment. The...

CVE-2016-4755

Terminal in Apple OS X before 10.12 uses weak permissions for the .bashhistory and .bashsession files, which allows local users to obtain sensitive information via unspecified vectors...

OpenJDK: Insecure shared memory permissions (2D, 8001034)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previou...

CVE-2011-5044

SopCast 3.4.7.45585 uses weak permissions Everyone:Full Control for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program...