Lucene search
+L

712 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-0008

Malicious code in bioql PyPI...

4.7CVSS4.8AI score0.00598EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2023-34952

Malicious code in bioql PyPI...

5.3CVSS4.9AI score0.00192EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/09/02 12:00 a.m.12 views

Ensure That the umask Value Is Correct

The umask value is the mask for default file or directory permissions. When a file or directory is created, its default permission is set to 777 minus the umask value. For a file, its execute permission is also removed. If the umask value is set improperly, the permission of new files may be too...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-45145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided...

3.6CVSS8.2AI score0.00444EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/08/06 2:53 a.m.6 views

SUSE CVE-2025-52900

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The file access permissions for files uploaded to or created from File Browser are never explicitly set by the application. The same is true for the...

5.5CVSS6.9AI score0.00195EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/06/26 2:46 p.m.2 views

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the process that handles file uploads and database creation. An attacker can gain unauthorized access to sensitive files by leveraging default file permissions that allow any operating system account to...

6.8CVSS6.8AI score0.00195EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/06/26 2:46 p.m.1 views

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the process that handles file uploads and database creation. An attacker can gain unauthorized access to sensitive files by leveraging default file permissions that allow any operating system account to...

6.8CVSS6.8AI score0.00195EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/06/26 2:46 p.m.2 views

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the process that handles file uploads and database creation. An attacker can gain unauthorized access to sensitive files by leveraging default file permissions that allow any operating system account to...

6.8CVSS6.8AI score0.00195EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/06/26 2:46 p.m.5 views

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the process that handles file uploads and database creation. An attacker can gain unauthorized access to sensitive files by leveraging default file permissions that allow any operating system account to...

6.8CVSS6.8AI score0.00195EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/06/26 12:00 a.m.7 views

PT-2025-26977 · Unknown · Filebrowser

Name of the Vulnerable Software and Affected Versions: File Browser versions prior to 2.33.7 Description: The issue arises from File Browser not explicitly setting file access permissions for uploaded or created files, as well as its database. This results in files being readable by any operating...

5.5CVSS6.2AI score0.00195EPSS
SaveExploits1References11
PyPA
PyPA
added 2025/05/31 1:15 a.m.15 views

PYSEC-2025-44

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS7AI score0.00191EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2025/05/31 1:15 a.m.20 views

CVE-2018-25111

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS0.00191EPSS
SaveExploits1References3
OSV
OSV
added 2025/05/31 1:15 a.m.9 views

PYSEC-2025-44

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS5.6AI score0.00191EPSS
SaveExploits1References4
Snyk
Snyk
added 2025/05/31 12:45 a.m.2 views

Insecure Inherited Permissions

Overview django-helpdesk is a Django-powered ticket tracker for your helpdesk Affected versions of this package are vulnerable to Insecure Inherited Permissions due to the improper setting of os.umask0 in models.py. An attacker can access sensitive data without proper authorization by exploiting...

5.1CVSS6.8AI score0.00191EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/05/31 12:00 a.m.10 views

Django-Helpdesk 安全漏洞

Django-Helpdesk is a Django application in the Django open source. It is used to manage internal helpdesk tickets. A security vulnerability exists in Django-Helpdesk versions prior to 1.0.0, which stems from os.umask0 in models.py leading to the exposure of sensitive data...

5.1CVSS6.3AI score0.00191EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 8:36 p.m.9 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS7.2AI score0.00408EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:27 p.m.14 views

CVE-2018-16494

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa...

8.8CVSS7.4AI score0.01922EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:24 p.m.10 views

CVE-2002-1786

SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information...

2.1CVSS6.6AI score0.00345EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/05/07 12:00 a.m.4 views

Ensure That the umask Value Is Correct

The umask value is the mask for default file or directory permissions. When a file or directory is created, its default permission is set to 777 minus the umask value. For a file, its execute permission is also removed. If the umask value is set improperly, the permission of new files may be too...

7AI score
SaveExploits0References3
OSV
OSV
added 2025/03/07 11:08 a.m.8 views

OESA-2025-1237 rust security update

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator. Security Fixes: Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not...

7.3CVSS6.8AI score0.00702EPSS
SaveExploits0References3
Rows per page
Query Builder