192 matches found
CVE-2026-14875
CVE-2026-14875 affects IBM i Access Client Solutions (ACS) on Windows, with versions 1.1.2.0 through 1.1.9.13 vulnerable when installed for all users due to a publicly writable directory. The underlying issue enables arbitrary code execution with local access and requires user interaction. IBM’s ...
CVE-2026-14875 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...
EUVD-2026-58363
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...
CVE-2026-14875
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...
CVE-2026-13094
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...
EUVD-2026-57614
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...
PT-2026-71301
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...
PT-2026-71321
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...
CVE-2026-40993 Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry
An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository saml2assertingpartymetadata may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials verificationcredentials and...
CVE-2022-31072
Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...
PT-2025-45032
Name of the Vulnerable Software and Affected Versions Mulesoft Anypoint Code Builder versions prior to 1.11.6 Description An issue exists in Salesforce Mulesoft Anypoint Code Builder related to incorrect permission assignment for a critical resource, allowing manipulation of writeable configurati...
Mozilla Thunderbird < 144.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 144.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-84 advisory. - Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory...
EUVD-1999-1052
Malware in sbrugna...
EUVD-2000-0710
Malware in sbrugna...
EUVD-2000-0785
Malware in sbrugna...
EUVD-2013-4249
Malware in sbrugna...
EUVD-2001-0842
Malware in sbrugna...