CVE-2020-1991: Insecure Temporary File

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect...

CVE-2020-1740: Insecure Temporary File

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...

CVE-2014-2387

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

CVE-2014-2387: Exposure of Resource to Wrong Sphere

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

PT-2019-7086

Name of the Vulnerable Software and Affected Versions Pen version 0.18.0 Description The issue is related to Insecure Temporary File Creation. Recommendations For Pen version 0.18.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2013-4280

CVE-2013-4280 affects RedHat vsdm 4.9.6 with an insecure temporary file vulnerability. The vulnerability’s impact is limited to integrity (I:H) with no confidentiality or availability impact per CVSS. It is a local-attack, low-complexity issue without required user interaction. Connected Nessus d...

CVE-2013-4280: Exposure of Resource to Wrong Sphere

Insecure temporary file vulnerability in RedHat vsdm 4.9.6...

PT-2019-6941

Name of the Vulnerable Software and Affected Versions RedHat vsdm version 4.9.6 Description The issue is related to an insecure temporary file vulnerability. Recommendations For RedHat vsdm version 4.9.6, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2013-0180

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

DEBIAN-CVE-2013-0180

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

CVE-2013-0178

Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm...

CVE-2013-0180

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

CVE-2013-0178

CVE-2013-0178 affects Redis before 2.6, with an insecure temporary file vulnerability related to /tmp/redis-%p.vm. The connected documents confirm the affected software and the insecure temp-file root cause but do not provide exploitation details, impact specifics, or any remediation/patch inform...

CVE-2013-0180: Improper Input Validation

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

PT-2019-6831

Name of the Vulnerable Software and Affected Versions Redis version 2.6 Description The issue is related to an insecure temporary file vulnerability. It is associated with the /tmp/redis.ds file in Redis. Recommendations For Redis version 2.6, consider updating to a newer version that addresses...

PT-2019-6830

Name of the Vulnerable Software and Affected Versions Redis versions prior to 2.6 Description The issue is related to an insecure temporary file vulnerability. It is associated with the /tmp/redis-%p.vm file. Recommendations For versions prior to 2.6, update to version 2.6 or later to resolve the...

CVE-2013-0178: Improper Input Validation

Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm...

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

CVE-2018-17955: Insecure Temporary File

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection...

CVE-2018-19640: Insecure Temporary File

If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 e.g. with CVE-2018-19638 he can kill arbitrary processes on the local machine...