CVE-2025-64322

The Salesforce Agentforce Vibes Extension is vulnerable to an incorrect permission assignment for a critical resource in versions prior to 3.3.0 (some sources specify before 3.2.0). This flaw allows an attacker to manipulate writeable configuration files . To remediate this issue, it is recommend...

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

CVE-2025-64321

The Salesforce Agentforce Vibes Extension is vulnerable to an Improper Neutralization of Input Used for LLM Prompting vulnerability (CWE-1427/CWE-94). This issue exists in versions prior to 3.3.0 (specifically noted as prior to 3.2.0 in some records) and allows an attacker to manipulate writeable...

CVE-2025-64319

The Salesforce Mulesoft Anypoint Code Builder is affected by a vulnerability caused by incorrect permission assignment for a critical resource . This flaw allows an attacker to manipulate writeable configuration files . The issue impacts versions prior to 1.12.1 (specifically noted as prior to 1....

CVE-2025-64319

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

CVE-2025-64318

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

CVE-2025-64318

The Salesforce Mulesoft Anypoint Code Builder is vulnerable to an Improper Neutralization of Input Used for LLM Prompting vulnerability (CWE-1427, CWE-94). This flaw allows an attacker to manipulate writeable configuration files . The issue affects versions prior to 1.12.1 (some sources specify p...

PT-2025-45035

Name of the Vulnerable Software and Affected Versions Salesforce Agentforce Vibes Extension versions prior to 3.2.0 Description An incorrect permission assignment for a critical resource exists in Salesforce Agentforce Vibes Extension, allowing manipulation of writable configuration files...

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce USA. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0 that stems from improper neutralization of LLM prompt inputs, which could lead to manipulation of writable...

Salesforce Mulesoft Anypoint Code Builder 安全漏洞

Salesforce Mulesoft Anypoint Code Builder is an integrated development environment from Salesforce USA. A security vulnerability exists in Salesforce Mulesoft Anypoint Code Builder versions prior to 1.11.6 that stems from improper input neutralization and could lead to the manipulation of writabl...

CVE-2025-12603 /etc/timezone can be Arbitrarily Written

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

PT-2025-44730

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The /etc/timezone file can be written to arbitrarily. This allows for potential modification of system-wide timezone settings. Recommendations Update BLU-IC2 to a...

CVE-2025-34287

Nagios XI versions prior to 2024R2 contain an improperly owned script, processperfdata.pl, which is executed periodically as the nagios user but owned by www-data. Because the file was writable by www-data, an attacker with web server privileges could modify its contents, leading to arbitrary cod...

CVE-2018-25123

Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG graphing component. MRTG-related processes/scripts executed with excessive privileges, allowing a local attacker with limited system access to abuse file/command execution paths or writable resources to gai...

CVE-2025-11906 Privilege escalation via writable configuration files in Progress Flowmon

A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service...

thunderbird: firefox: Some non-writable Object properties could be modified

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Fedora 43 : fluidsynth (2025-0ea3179bb0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0ea3179bb0 advisory. Fix world writeable /run/lock/fluidsynth Update to 2.4.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

RHEL 7 : firefox (RHSA-2025:19278)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:19278 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: thunderbird...