PT-2023-2974 · Faronics · Faronics Insight

Name of the Vulnerable Software and Affected Versions: Faronics Insight version 10.0.19045 Description: An issue in Faronics Insight allows every keystroke made by any user on a computer with the Student application installed to be logged to a world-readable directory. This enables a local attack...

RHEL 7 : OCS 3.11.z async (RHSA-2020:4143)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4143 advisory. Red Hat OpenShift Container StorageOCS is a provider of agnostic persistent storage for OpenShift Container Platform either in-house or in a...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

Code injection

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48258

CVE-2022-48258 affects EternalTerminal 6.2.1; etserver and etclient create world-readable logfiles, enabling potential exposure of logs containing sensitive data. The CVSS v3.1 base score is 5.3 (Medium) with Confidentiality impact Low. Remediation: update to 6.2.8 (and related package fixes) as ...

PT-2023-15654

Name of the Vulnerable Software and Affected Versions Eternal Terminal version 6.2.1 Description The issue concerns world-readable logfiles in etserver and etclient. Recommendations For Eternal Terminal version 6.2.1, restrict access to the logfiles of etserver and etclient to prevent unauthorize...

net/eternalterminal -- Multiple vulnerabilities

Mitre reports: etserver and etclient have predictable logfile names in /tmp and they are world-readable logfiles...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48258: Exposure of Sensitive Information to an Unauthorized Actor

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

CVE-2022-48258

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...

UBUNTU-CVE-2022-47927

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These files inclu...

Debian: Security Advisory (DLA-3229-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3229 : node-log4js - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3229 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3229-1 [email protected] https://www.debian.org/lts/security/...

mediawiki -- multiple vulnerabilities

Mediawikwi reports: T322637, CVE-2022-PENDING SECURITY: Make sqlite DB files not world readable...

DEBIAN-CVE-2022-46338

g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data...

CVE-2022-46338

g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data...

CVE-2022-46338: Incorrect Permission Assignment for Critical Resource

g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data...

CVE-2022-46338

g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data...

MPXJ 安全漏洞

MPXJ is an open source library for Jon Iles individual developers. It is used to read and write project plans from various file formats and databases. A security vulnerability exists in MPXJ versions prior to 10.14.1 that stems from the use of File.createTempFile... This causes a temporary file t...