CVE-2019-3937: Cleartext Storage of Sensitive Information

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sensitive data...

Directory traversal

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

CVE-2019-11502

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

CVE-2019-11502

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

DEBIAN-CVE-2019-11502

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

CVE-2019-11502

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

CVE-2019-11502

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

PT-2019-12338

Name of the Vulnerable Software and Affected Versions snapd versions prior to 2.38 Description The issue arises from incorrect ownership setting of a snap application by snap-confine in snapd, granting unintended access to a private /tmp directory to the first calling user. Recommendations For...

CVE-2019-11502: Improper Link Resolution Before File Access

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory...

CVE-2011-1830 Ekiga attempts to dlopen /tmp/ekiga_test.so

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekigatest.so...

PT-2019-6631

Name of the Vulnerable Software and Affected Versions Ekiga versions prior to 3.3.0 Description The issue arises when Ekiga attempts to load a module from /tmp/ekiga test.so. This behavior could potentially be exploited. Recommendations For versions prior to 3.3.0, update to version 3.3.0 or late...

CVE-2011-1830: Improper Control of Generation of Code

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekigatest.so...

CVE-2019-9976

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

CVE-2019-9976

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

PT-2019-12065

Name of the Vulnerable Software and Affected Versions Ninja Forms plugin versions prior to 3.0.23 Description The issue allows an attacker to traverse the file system and access files, as well as execute code. This is achieved through the includes/fields/upload.php page, specifically via the name...

PT-2019-19971

Name of the Vulnerable Software and Affected Versions DASAN H660RM firmware 1.03-0022 Description The issue affects the Boa server configuration, allowing logged-in users to read the credentials of administration web interface users due to the logging of POST data to the /tmp/boa-temp file...

CVE-2019-9976: Insertion of Sensitive Information into Log File

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

WordPress Nishizawa_Tmp Themes Database Profile Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A database configuration file download vulnerability exists in WordPress NishizawaTmp Themes, which can be exploited by an attacker to download arbitrary files...

CVE-2018-19637: Insecure Temporary File

Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supplog, allowing local attackers to overwrite files on systems without symlink protection...

Security update for systemd (important)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:0098-1 Rating: important References: 1005023 1045723 1076696 1080919 1093753 1101591 1111498 1114933 1117063 1119971 1120323 Cross-References: CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 CVE-2018-6954 Affecte...