Lucene search
+L

1657 matches found

OSV
OSV
•added 2024/09/16 2:15 a.m.•7 views

DEBIAN-CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

9.1CVSS5.3AI score0.00555EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/16 2:15 a.m.•43 views

UBUNTU-CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

9.1CVSS5.8AI score0.00555EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/09/16 12:00 a.m.•34 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

0.00555EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/09/16 12:00 a.m.•63 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

9.1CVSS5.3AI score0.00555EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/16 12:00 a.m.•3 views

CVE-2024-46958: Undefined Security Weakness

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

9.1CVSS5.8AI score0.00555EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/16 12:00 a.m.•14 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

6.8AI score0.00555EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2024/09/12 12:00 a.m.•13 views

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2024-2409)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.7CVSS5.2AI score0.02421EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•13 views

EulerOS 2.0 SP9 : cups (EulerOS-SA-2024-2384)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the...

6.7CVSS6.2AI score0.02421EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•14 views

EulerOS 2.0 SP10 : cups (EulerOS-SA-2024-2409)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the...

6.7CVSS6.2AI score0.02421EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•19 views

EulerOS 2.0 SP9 : cups (EulerOS-SA-2024-2359)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the...

6.7CVSS6.2AI score0.02421EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/09/03 7:07 p.m.•25 views

CVE-2024-45310 runc can be confused to create empty files/directories on the host

runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers an...

3.6CVSS7AI score0.00317EPSS
SaveExploits0References5
Veracode
Veracode
•added 2024/08/26 8:45 a.m.•25 views

Incorrect Default Permissions

RequestStore is vulnerable to Incorrect Default Permissions. The vulnerability is due to the files being published with world-writable permissions, This allowing attackers to execute arbitrary code...

7.8CVSS7.8AI score0.00194EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2024/08/24 7:21 p.m.•6 views

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions. The default file permissions were set to world-writable. By modifying these accessible files, an attacker can execute arbitrary code. This is only exploitable if local user access is allowed on the system...

7.8CVSS7.2AI score0.00194EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/08/24 1:40 a.m.•22 views

CVE-2024-43791

A flaw was found in RequestStore, which provides per-request global storage. This flaw allows a malicious user to execute arbitrary code due to global permission issues...

7.8CVSS7.7AI score0.00194EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/08/23 3:15 p.m.•21 views

CVE-2024-43791

RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...

7.8CVSS7.1AI score0.00194EPSS
SaveExploits0References2
OSV
OSV
•added 2024/08/23 3:15 p.m.•55 views

UBUNTU-CVE-2024-43791

RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...

7.8CVSS6AI score0.00194EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/08/23 2:39 p.m.•93 views

CVE-2024-43791

RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...

7.8CVSS7.9AI score0.00194EPSS
SaveExploits0
OSV
OSV
•added 2024/08/23 2:39 p.m.•32 views

CVE-2024-43791 RequestStore has Incorrect Default Permissions

RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...

7.8CVSS7.5AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/23 12:00 a.m.•1 views

CVE-2024-43791: Incorrect Default Permissions

RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...

7.8CVSS7.8AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/23 12:00 a.m.•20 views

PT-2024-30660 · Unknown · Request Store

Name of the Vulnerable Software and Affected Versions: request store version 1.3.2 Description: The files published as part of request store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, a...

7.8CVSS7.3AI score0.00194EPSS
SaveExploits0References16
Rows per page
Query Builder