Search Results (606 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-5578 1 Python 1 Keyring 2024-11-21 6.2 Medium
Python keyring has insecure permissions on new databases allowing world-readable files to be created
CVE-2012-5577 2 Debian, Python 2 Debian Linux, Keyring 2024-11-21 7.5 High
Python keyring lib before 0.10 created keyring files with world-readable permissions.
CVE-2012-4434 1 Cipherdyne 1 Fwknop 2024-11-21 8.8 High
fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code.
CVE-2012-1157 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.3 Medium
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
CVE-2011-1762 1 Wordpress 1 Wordpress 2024-11-21 6.5 Medium
A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.
CVE-2010-5108 2 Debian, Edgewall 2 Debian Linux, Trac 2024-11-21 7.5 High
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.