Vulnerabilities (CVE)

Filtered by CWE-275
Total 84 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4201 1 Katello 1 Katello 2026-06-16 4.0 MEDIUM 4.3 MEDIUM
Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions.
CVE-2013-4040 1 Ibm 1 Tivoli Application Dependency Discovery Manager 2026-06-16 2.1 LOW 5.5 MEDIUM
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.
CVE-2013-3703 1 Opensuse 1 Open Build Service 2026-06-16 4.0 MEDIUM 8.8 HIGH
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.
CVE-2012-5628 1 Gofer Project 1 Gofer 2026-06-16 3.6 LOW 4.4 MEDIUM
gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries.