2851 matches found
PYSEC-2020-8
A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...
PYSEC-2020-8
A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...
Incorrect Default Permissions in keyring
Python keyring has insecure permissions on new databases, allowing world-readable files to be created...
GHSA-8867-VPM3-G98G Incorrect Default Permissions in keyring
Python keyring has insecure permissions on new databases, allowing world-readable files to be created...
CVE-2020-8634
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may...
CVE-2020-8634
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may...
CVE-2020-8634
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may...
CVE-2020-8634: Improper Preservation of Permissions
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may...
World Readable File
ansible is vulnerable to World Readable File. When the function atomicmove is invoked for moving files without a mode, it leads to a file creattion with default 0666 permissions if the destination file does not exists, creating world readable files depending on the default umask as well as the...
openSUSE Security Update : libsolv / libzypp / zypper (openSUSE-2020-255)
This update for libsolv, libzypp, zypper fixes the following issues : Security issue fixed : - CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Bug fixes - Fixed removing orphaned packages dropped by to-be-installed products bsc1155819. - Adds libzypp API to mark all...
openSUSE: Security Advisory for libsolv, (openSUSE-SU-2020:0255-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for libsolv, libzypp, zypper (moderate)
openSUSE Security Update: Security update for libsolv, libzypp, zypper Announcement ID: openSUSE-SU-2020:0255-1 Rating: moderate References: 1135114 1154804 1154805 1155198 1155205 1155298 1155678 1155819 1156158 1157377 1158763 Cross-References: CVE-2019-18900 Affected Products: openSUSE Leap 15...
CVE-2012-0844
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar...
CVE-2012-0844
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar...
DEBIAN-CVE-2012-0844
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar...
CVE-2012-0844
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar...
CVE-2012-0844
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar...
CVE-2012-0844
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar...
CVE-2012-0844: Exposure of Sensitive Information to an Unauthorized Actor
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar...
PT-2020-7169
Name of the Vulnerable Software and Affected Versions Netsurf versions through 2.8 Description The issue is related to an information-disclosure vulnerability due to a world-readable cookie jar. Recommendations For versions through 2.8, update to a version where the cookie jar is not world-readab...