333 matches found
Safenet_SAC_CVE-2021-42056
Safenet Authentication Client Escalation dei Privilegi CVE-2021-42056 In base al sito web di Thales 1, SafeNet Authentication Client è un client middleware che gestisce l'ampio portfolio SafeNet di Thales di autenticatori basati su certificati, inclusi eToken, smart card SafeNet IDPrime,...
EPScalate
EPScalate Una vulnerabilità di escalation dei privilegi nella soluzione Seqrite Enterprise Endpoint Security EPS di QuickHeal. Alla vulnerabilità è stato assegnato l'ID CVE CVE-2023-31497. https://user-images.githubusercontent.com/39941993/230790056-87157751-b96c-49a6-81df-bf3126acfbd6.mp4 Dettag...
Incorrect Permission Assignment for Critical Resource
Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ServeCreateOrUpdatePlaylist process. An attacker can overwrite or create arbitrary files on the host system by supplying a crafted playlist ID that resolves to an...
GHSA-F2M9-WCF4-CWWX MLFlow Creates a Temporary File With Insecure Permissions
In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...
CVE-2016-20024
ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with...
CVE-2016-20024
ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with...
CVE-2025-8766
A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,...
CVE-2025-8766 Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container
A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container,...
CVE-2025-64724 Arduino IDE for macOS has Insecure File Permissions
Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS is installed with world-writable file permissions on sensitive application components, allowing any local user to replace legitimate files with malicious code. When another user launches the...
EUVD-2005-2583
Malware in sbrugna...
EUVD-2009-3860
Malware in sbrugna...
EUVD-2004-2327
Malware in sbrugna...
EUVD-2013-6955
Malware in sbrugna...
EUVD-1999-1154
Malware in sbrugna...
EUVD-2016-2334
Malware in sbrugna...
EUVD-2002-1770
Malware in sbrugna...
EUVD-2012-5491
Malware in sbrugna...
EUVD-2002-0524
Malware in sbrugna...