1554 matches found
PT-2019-6802
Name of the Vulnerable Software and Affected Versions isearch versions prior to 1.47.01nb1 Description The issue concerns the creation of insecure temporary files in a publicly-writable area, specifically /tmp, due to the use of the tempnam function. Recommendations For versions prior to...
CVE-2013-4318
File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory...
Design/Logic Flaw
File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory...
CVE-2013-4318
File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory...
CVE-2013-4318
CVE-2013-4318 affects the Ruby Gems Features package (Ruby Features 0.3.0). The issue is a file handling flaw where input submitted to /tmp/out.html is not properly validated, enabling a local cross-site scripting (XSS) attack. Some sources describe the risk as a local XSS, while others reference...
PT-2019-6943
Name of the Vulnerable Software and Affected Versions Features version 0.3.0 Description The issue allows remote attackers to inject malicious html in the "/tmp" directory. Recommendations For version 0.3.0, consider restricting access to the /tmp directory to minimize the risk of exploitation. A...
CVE-2013-4318: Improper Neutralization of Special Elements in Output Used by a Downstream Component
File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory...
CVE-2014-3701
eDeploy has tmp file race condition flaws...
Race condition
eDeploy has tmp file race condition flaws...
CVE-2014-3701
eDeploy has tmp file race condition flaws...
CVE-2014-3701: Concurrent Execution using Shared Resource with Improper Synchronization
eDeploy has tmp file race condition flaws...
CVE-2012-1105
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...
CVE-2012-1105
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...
Design/Logic Flaw
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS...
CVE-2013-0163
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS...
PT-2019-6828
Name of the Vulnerable Software and Affected Versions OpenShift haproxy cartridge affected versions not specified Description The issue concerns a predictable /tmp in the set-proxy connection hook of the OpenShift haproxy cartridge, which could facilitate a denial-of-service DoS attack...
PT-2019-6733
Name of the Vulnerable Software and Affected Versions Jasig Project php-pear-CAS version 1.2.2 Description An Information Disclosure issue exists in the Jasig Project php-pear-CAS package. The Central Authentication Service client library archives the debug logging file in an insecure manner in t...
CVE-2013-0163: Exposure of Resource to Wrong Sphere
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS...
CVE-2012-1105: Exposure of Sensitive Information to an Unauthorized Actor
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...
