CVE-2021-21430

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data...

CVE-2012-5663

The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...

CVE-2007-3915

Mondo 2.24 has insecure handling of temporary files...

CVE-2005-2519

slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges...

CVE-2003-0537

The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users...

CVE-2005-2211

Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...

CVE-2003-0207

ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files...

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions due to improper handling of temporary files. On Unix-like systems, if the Native.getClass method is invoked without prior initialization via Native.initFile with a non-null argument,...

PT-2024-35368 · Dell · Dell Nativeedge

Name of the Vulnerable Software and Affected Versions: Dell NativeEdge version 2.1.0.0 Description: The issue is related to the creation of temporary files with insecure permissions. A high-privileged attacker with local access could potentially exploit this, leading to information disclosure...

NVIDIA Base Command Manager和NVIDIA Bright Cluster Manager 安全漏洞

NVIDIA Base Command Manager and NVIDIA Bright Cluster Manager are both products of NVIDIA Corporation.NVIDIA Base Command Manager is a base command manager.NVIDIA Bright Cluster Manager is a cluster manager. NVIDIA Bright Cluster Manager is a cluster manager. NVIDIA Bright Cluster Manager is a...

The vulnerability of the Firmware Update Handler component of the Siemens SINEMA Remote Connect server allows a hacker to gain increased privileges.

The vulnerability of the Firmware Update Handler component in Siemens SINEMA Remote Connect relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

aeon-check 安全漏洞

aeon-check is an open source tool from openSUSE. A security vulnerability exists in aeon-check that stems from an insecure way of creating temporary files, which allows a local user on a non-default-configured system to cause a denial of service or to set the encryption key for the file system...

RHEL 7 : instack-undercloud (RHSA-2017:2687)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:2687 advisory. instack-undercloud provides a collection of scripts and elements that can be used to install an OpenStack undercloud using python-instack. Security...

RHEL 7 : instack-undercloud (RHSA-2017:2557)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:2557 advisory. instack-undercloud provides a collection of scripts and elements that can be used to install an OpenStack undercloud using python-instack. Security...

USN-7064-2: nano vulnerability

USN-7064-1 fixed a vulnerability in nano. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed while editing, the permissions grante...

PT-2024-7227 · Foxmarks · Foxmarks

Name of the Vulnerable Software and Affected Versions: foxmarks versions prior to 2.1.0 Description: The issue is related to the creation of a temporary file in the /tmp directory with insecure permissions, allowing a malicious user to read confidential information from Firefox's database,...

The vulnerability of the Notes component in operating systems iPadOS and iOS, which allows a hacker to disclose sensitive information

The vulnerability of the Notes component in iPadOS and iOS operating systems is related to insecure temporary files. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these systems...

PT-2024-8747 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: A vulnerability has been identified in the SINEMA Remote Connect Server, where the affected application does not properly assign rights to temporary files created during its...

Nano Security Breach

Nano is a text editor from Nano Open Source. A security vulnerability exists in Nano that stems from allowing possible privilege escalation via insecure temporary files...

SUSE CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...