Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,845

CVE-2016-0823

kernel: Leakage of physical address mappings to non-privileged userspace

The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721.

CVSS 3.0 · 4.0 Medium EPSS < 1% KEV · Not listed
Vendors
Google Linux
Products
Android Linux Kernel
CVE-2014-2068

jenkins: information leak via system diagnostic functionalities (SECURITY-73)

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

CVSS 2.0 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2016-2142

openshift: Bind password for AD account is stored in world readable file

Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allows local users to obtain Active Directory credentials by reading the file.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2015-3201

thermostat: world-readable configuration file containing credentials

Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhel Software Collections Thermostat
CVE-2015-0237

vdsm: Users attempting a live storage migration create snapshot without snapshot creation permissions

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2013-7458

redis: world-readable ~/.rediscli_history

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Debian Redislabs
Products
Debian Linux Redis
CVE-2013-2027

Jython creates executables class files with wrong permissions

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Jython Project Opensuse
Products
Jython Opensuse
CVE-2014-0233

OpenShift: downloadable cartridge source url file command execution as root

Red Hat OpenShift Enterprise 2.0 and 2.1 and OpenShift Origin allow remote authenticated users to execute arbitrary commands via shell metacharacters in a directory name that is referenced by a cartridge using the file: URI scheme.

CVSS 2.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2013-4455

katello-installer: node-installer creates world readable private key file

Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Katello
Products
Katello Installer
CVE-2016-4036

quagga: Wrong permissions allowing information leak

The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse
Products
Leap Opensuse
CVE-2014-2893

llvm: insecure temporary file handling in clang's scan-build utility

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Llvm Opensuse
Products
Clang Opensuse
CVE-2016-6322

QCI: creates world readable /etc/qci/answers contains sensitive password

Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.

CVSS 3.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Quickstart Cloud Installer
CVE-2014-0135

rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Theforeman
Products
Satellite Satellite Capsule Kafo
CVE-2015-0271

dashboard: log file arbitrary file retrieval

The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path.

CVSS 2.0 · 4.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Openstack
CVE-2015-4053

ceph-deploy admin command copies keyring file to /etc/ceph which is world readable

The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Ceph Redhat
Products
Ceph-deploy Ceph Storage
CVE-2016-4971

wget: Lack of filename checking allows arbitrary file upload via FTP redirect

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

CVSS 3.1 · 8.8 High EPSS 46.1% KEV · Not listed
Vendors
Canonical Gnu Oracle and 2 more
Products
Ubuntu Linux Wget Solaris and 2 more
CVE-2014-0200

ovirt-engine-reports: js-jboss7-ds.xml is world-readable

The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permissions on the datasource configuration file (js-jboss7-ds.xml), which allows local users to obtain sensitive information by reading the file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhev Manager Rhevm-reports
CVE-2014-0199

ovirt-engine-reports: setup script logs database password in cleartext

The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhev Manager Rhevm-reports
CVE-2015-3646

openstack-keystone: cache backend password leak in log (OSSA 2015-008)

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Openstack Oracle
Products
Keystone Solaris