CVE-2015-8621

MEDIUM Year: 2015
CVSS v3 Score
5.5
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-264
View all →

Vulnerability Description

t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t_coffee globally.

Related Vulnerabilities

CVE-2014-2079

MEDIUM
CVSS:5.5(Medium)

X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba an...

CWE-2642014

CVE-2016-10187

MEDIUM
CVSS:5.5(Medium)

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.

CWE-2642016

CVE-2016-2202

MEDIUM
CVSS:5.5(Medium)

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist restri...

CWE-2642016

CVE-2016-2457

MEDIUM
CVSS:5.5(Medium)

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes ...

CWE-2642016

CVE-2016-2809

MEDIUM
CVSS:5.5(Medium)

The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.

CWE-2642016

CVE-2016-3373

MEDIUM
CVSS:5.5(Medium)

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does...

CWE-2642016