Vulnerabilities (CVE)

Filtered by CWE-276
Total 1583 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-1713 1 Mandrakesoft 1 Mandrake Linux 2026-06-16 2.1 LOW 5.5 MEDIUM
The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.
CVE-2001-0497 1 Isc 1 Bind 2026-06-16 4.6 MEDIUM 7.8 HIGH
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.
CVE-1999-0426 1 Suse 1 Suse Linux 2026-06-16 10.0 HIGH 9.8 CRITICAL
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.