CVE-2014-5254

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

CVE-2014-5255

CVE-2014-5255 affects xcfa prior to 5.0.1. The vulnerability stems from insecure creation of temporary files, enabling a local attacker to perform a symlink attack and overwrite arbitrary files. The provided documents do not specify a patch version or remediation steps, and do not indicate whethe...

CVE-2014-2904

CVE-2014-2904 affects wolfSSL prior to 3.2.0, where a server certificate is not properly authorized for server authentication. This has been documented across multiple sources (OSV, NVD, Debian/Ubuntu advisories, and CVE records). The description consistently notes the issue without detailing exp...

CVE-2014-2902

CVE-2014-2902 affects wolfSSL prior to 3.2.0 and indicates a flaw where the library does not properly authorize a CA certificate for signing other certificates. The connected OSV/NVD entries confirm the same description across multiple ecosystems. The core issue is a lack of proper CA certificate...

CVE-2014-2901

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...

CVE-2014-2901

CVE-2014-2901 concerns wolfSSL versions prior to 3.2.0 that do not properly issue certificates for a server’s hostname. Multiple sources (NVD, OSV, OSV-UBUNTU, Debian/Ubuntu trackers, Nessus plugin reference) corroborate the issue description. The connected documents provide the core detail: the ...

CVE-2014-8356

The CVE-2014-8356 issue affects Zhone zNID GPON 2426A and related 24xx/42xx/26xx/28xx-series devices, with firmware older than S3.0.501. The vulnerability arises from an Insecure Direct Object Reference that allows remote authenticated users to bypass access controls by altering server responses ...

CVE-2014-1936

rc before 1.7.1-5 insecurely creates temporary files...

CVE-2014-3700

eDeploy through at least 2014-10-14 has remote code execution due to eval of untrusted data...

CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

UBUNTU-CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2014-1938

python-rply before 0.7.4 insecurely creates temporary files...

CVE-2014-1936

rc before 1.7.1-5 insecurely creates temporary files...

CVE-2014-3700

CVE-2014-3700 relates to the eDeploy component, where remote code execution is possible due to the use of eval() on untrusted data. The available records describe this as a high/severity issue with RCE risk (NVD CVSS v2: 7.5 Partial Integrity/Partial Availability; v3.1: 9.8 Critical), indicating ...

CVE-2014-1938

CVE-2014-1938 affects the Python library rply (versions before 0.7.4). The root cause is insecure creation of temporary files, enabling local interference with per-user or system temp directories as described in the related advisories. Remediation: upgrade to a fixed version (0.7.4 or later) or a...

CVE-2014-1937

CVE-2014-1937 affects Gamera prior to version 3.4.1, which insecurely creates temporary files. The vulnerability’s impact per the cited data is partial integrity loss with no confidentiality or availability impact, and network attack vector with low complexity. No exploitation details or active e...

CVE-2014-1936

CVE-2014-1936 concerns the temporary file handling in the rc project’s Temp File Handler. Multiple connected sources confirm that rc versions before 1.7.1-5 insecurely create temporary files, enabling potential unauthorized access to protected information (root cause: insecure temporary file crea...