2014 matches found
SUSE-SU-2018:0336-1 Security update for ecryptfs-utils
This update for ecryptfs-utils fixes the following issues: - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...
Unidesk 2.X: Health Status: High Swap Memory Usage
In the Unidesk Management Console, you might see "Needs Attention" as the status on one or another of your appliances, and if you click the i info button, you will see "High swap memory usage." If you have e-mail notification turned on, you will get e-mailed when the condition is triggered. High...
swap-bot.net XSS vulnerability
Open Bug Bounty ID: OBB-493986 Description| Value ---|--- Affected Website:| swap-bot.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...
swap-bot.com XSS vulnerability
Open Bug Bounty ID: OBB-488492 Description| Value ---|--- Affected Website:| swap-bot.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...
CVE-2017-17087
It was found that the swap file created by vim when opening a file was using the user's primary group instead of the file's group. An attacker belonging to the victim's primary group could use this flaw to read the vim swap file...
Vim Information Disclosure Vulnerability (CNVD-2017-38252)
Vim is a text editor developed from vi. An information disclosure vulnerability exists in Vim prior to 8.0.1263. The vulnerability arises because fileio.c in Vim sets the group ownership of a .swp file to the editor's main group which may differ from the group ownership of the original file. A...
DEBIAN-CVE-2017-17087
fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group ownership of the original file, which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by...
UBUNTU-CVE-2017-17087
fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group ownership of the original file, which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by...
CVE-2017-1000382
It was found that vim applies the opened file read permissions to the swap file, overriding the process' umask. An attacker might search for vim swap files that were not deleted properly, in order to retrieve sensitive data...
VIM Information Disclosure Vulnerability
VIM is an open source, configurable text editor for creating and changing any type of text, which can be used on most UNIX systems and Apple OS X. It can be used on most UNIX systems. A security vulnerability exists in VIM version 8.0.1187 that stems from the program's failure to use a mask when...
GNU Emacs Information Disclosure Vulnerability
GNU Emacs is a Unix text editor written in C developed by the GNU Project, which supports syntax highlighting, multiple languages and feature extensions. A security vulnerability exists in GNU Emacs version 25.3.1, which stems from the program's failure to use a mask when creating swap files. An...
UBUNTU-CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
Design/Logic Flaw
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
DEBIAN-CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
CVE-2017-1000382
CVE-2017-1000382 is tied to Vim prior to patch levels where 8.0.1187 (and likely other versions) ignores umask when creating a swap file named ā.swp, causing the swap file to be world-readable or accessible in ways not intended by the user running vim. The connected sources confirm this specific ...
CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...