Lucene search
+L

1424 matches found

UbuntuCve
UbuntuCve
added 2019/11/21 2:15 p.m.28 views

CVE-2013-7171

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...

10CVSS7.5AI score0.06344EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/11/21 2:15 p.m.29 views

CVE-2013-7172

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges...

7.8CVSS7.3AI score0.0046EPSS
SaveExploits0References2
Prion
Prion
added 2019/11/21 2:15 p.m.20 views

Code injection

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges...

7.2CVSS7.7AI score0.0046EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2019/11/21 1:51 p.m.21 views

CVE-2013-7172

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges...

7.8AI score0.0046EPSS
SaveExploits0References4
CVE
CVE
added 2019/11/21 1:51 p.m.47 views

CVE-2013-7172

CVE-2013-7172 affects Slackware 13.1, 13.37, 14.0 and 14.1, where world-writable permissions on the iodbctest and iodbctestw programs in the libiodbc package could allow local users to use RPATH information to execute arbitrary code with root privileges. The connected documents corroborate the af...

7.8CVSS7.7AI score0.0046EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2019/11/21 1:51 p.m.35 views

CVE-2013-7172

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges...

7.8CVSS7.8AI score0.0046EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/11/21 1:46 p.m.16 views

CVE-2013-7171

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...

9.8AI score0.06344EPSS
SaveExploits0References4
CVE
CVE
added 2019/11/21 1:46 p.m.58 views

CVE-2013-7171

CVE-2013-7171 affects Slackware 14.0/14.1 and Slackware LLVM 3.0-i486-2, 3.3-i486-2, where world-writable /tmp permissions could let a remote attacker execute arbitrary code with root privileges. Root cause identified as improper /tmp directory permissions; no specific patch/version or remediatio...

10CVSS9.7AI score0.06344EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2019/11/21 1:46 p.m.21 views

CVE-2013-7171

Removed by vendor...

10CVSS9.5AI score0.06344EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/11/21 10:6 a.m.8 views

kubernetes: Schema info written with world-writeable permissions when cached

A flaw was found in kubectl that leaves http-cache files with read/write permissions for any user. In conjunction with a non-default value for --cache-dir, this may lead to the cache content being placed in a location accessible to other users on the system...

5CVSS7.3AI score0.00483EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2019/10/29 12:0 a.m.27 views

CVE-2019-11485

Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling...

3.3CVSS5.9AI score0.0026EPSS
SaveExploits0References3
OSV
OSV
added 2019/10/29 12:0 a.m.4 views

UBUNTU-CVE-2019-11485

Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling...

3.3CVSS5.8AI score0.0026EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2019/10/25 7:41 p.m.35 views

Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS7.5AI score0.00332EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2019/10/25 6:9 a.m.20 views

Insecure File Permission

rubyparser-legacy has insecure file permission configured on its Ruby files. World-writable Ruby files would allow a local user to insert malicious Ruby code into several Ruby files, which would be executed when the library is used...

7.8CVSS2.1AI score0.00332EPSS
SaveExploits1References3Affected Software2
NVD
NVD
added 2019/10/24 2:15 p.m.18 views

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS7.8AI score0.00332EPSS
SaveExploits1References1
OSV
OSV
added 2019/10/24 2:15 p.m.10 views

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS8AI score
SaveExploits0References1
Prion
Prion
added 2019/10/24 2:15 p.m.21 views

Design/Logic Flaw

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

4.6CVSS7.7AI score0.00332EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/24 1:59 p.m.20 views

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8AI score0.00332EPSS
SaveExploits1References1
CVE
CVE
added 2019/10/24 1:59 p.m.100 views

CVE-2019-18409

The CVE-2019-18409 entry concerns the ruby_parser-legacy gem (version 1.0.0) for Ruby, where local privilege escalation is possible due to world-writable files. The Red Hat and other sources reiterate that, for example, if the brakeman gem (with legacy dependency) versions 4.5.0–4.7.0 are used, a...

7.8CVSS7.7AI score0.00332EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
added 2019/10/24 12:0 a.m.23 views

ruby_parser-legacy world writable files allow local privilege escalation

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS3.2AI score0.00332EPSS
SaveExploits1References1
Rows per page
Query Builder