Lucene search
+L

778 matches found

OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•16 views

SUSE: Security Advisory (SUSE-SU-2017:0394-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.02765EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•37 views

SUSE: Security Advisory (SUSE-SU-2014:0750-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS8.9AI score0.0503EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2021/06/04 7:54 p.m.•44 views

Security Bulletin: IBM Security Guardium is affected by a kernel vulnerability

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-35513 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a flaw with incorrectly umask during file or directory modification in the NFS network file system function. By sending ...

4.9CVSS6.5AI score0.01347EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2021/05/27 1:15 p.m.•12 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS7.7AI score
SaveExploits0References2
NVD
NVD
•added 2021/05/27 1:15 p.m.•32 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS0.00408EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/27 1:15 p.m.•10 views

DEBIAN-CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS7.5AI score0.00408EPSS
SaveExploits1References1
Prion
Prion
•added 2021/05/27 1:15 p.m.•24 views

Command injection

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.2CVSS7.7AI score0.00408EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/05/27 1:15 p.m.•9 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS6.2AI score0.00408EPSS
SaveExploits1References3
CVE
CVE
•added 2021/05/27 12:11 p.m.•113 views

CVE-2021-31155

CVE-2021-31155 affects pleaser. The root cause is a failure to normalize the umask before 0.4, enabling a local attacker who can execute at least one command to gain full root privileges. Affected version: pleaser prior to 0.4.0. Evidence from connected records corroborates the local-privilege-es...

7.8CVSS7.6AI score0.00408EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/05/27 12:11 p.m.•85 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS7.7AI score0.00408EPSS
SaveExploits1
Mend
Mend
•added 2021/05/27 12:11 p.m.•4 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

8.5CVSS0.00408EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2021/05/27 12:11 p.m.•44 views

CVE-2021-31155

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

8AI score0.00408EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/27 12:00 p.m.•34 views

RUSTSEC-2021-0101 Permissions bypass in pleaser

Failure to normalize the umask in pleaser before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS7.6AI score0.00408EPSS
SaveExploits1References3
RustSec
RustSec
•added 2021/05/27 12:00 p.m.•23 views

Permissions bypass in pleaser

Failure to normalize the umask in pleaser before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS4.7AI score0.00408EPSS
SaveExploits1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/27 12:00 a.m.•3 views

CVE-2021-31155: Incorrect Permission Assignment for Critical Resource

Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS6.1AI score0.00408EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/26 7:15 p.m.•22 views

CVE-2018-16494

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa...

8.8CVSS6AI score0.01922EPSS
SaveExploits0References1
Prion
Prion
•added 2021/05/26 7:15 p.m.•32 views

Code injection

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa...

6.5CVSS8.8AI score0.01922EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/05/26 6:46 p.m.•60 views

CVE-2018-16494

CVE-2018-16494 affects Versa Networks Versa OS (VOS). The issue is an overly permissive default file-creation mask (umask) that allows authorized server users to obtain unauthorized access via insecure file permissions. This can lead to arbitrary read, write, or execution of newly created files a...

8.8CVSS8.9AI score0.01922EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/05/26 6:46 p.m.•44 views

CVE-2018-16494

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa...

8.9AI score0.01922EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/26 12:00 a.m.•3 views

PT-2021-8818

Name of the Vulnerable Software and Affected Versions Versa servers affected versions not specified Description The issue is related to an overly permissive "umask" setting in VOS, which may allow authorized users of the server to gain unauthorized access through insecure file permissions. This c...

8.8CVSS0.01922EPSS
SaveExploits0References5
Rows per page
Query Builder