428 matches found
NVIDIA Base Command Manager和NVIDIA Bright Cluster Manager 安全漏洞
NVIDIA Base Command Manager and NVIDIA Bright Cluster Manager are both products of NVIDIA Corporation.NVIDIA Base Command Manager is a base command manager.NVIDIA Bright Cluster Manager is a cluster manager. NVIDIA Bright Cluster Manager is a cluster manager. NVIDIA Bright Cluster Manager is a...
The vulnerability of the Firmware Update Handler component of the Siemens SINEMA Remote Connect server allows a hacker to gain increased privileges.
The vulnerability of the Firmware Update Handler component in Siemens SINEMA Remote Connect relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
aeon-check 安全漏洞
aeon-check is an open source tool from openSUSE. A security vulnerability exists in aeon-check that stems from an insecure way of creating temporary files, which allows a local user on a non-default-configured system to cause a denial of service or to set the encryption key for the file system...
RHEL 7 : instack-undercloud (RHSA-2017:2557)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:2557 advisory. instack-undercloud provides a collection of scripts and elements that can be used to install an OpenStack undercloud using python-instack. Security...
RHEL 7 : instack-undercloud (RHSA-2017:2687)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:2687 advisory. instack-undercloud provides a collection of scripts and elements that can be used to install an OpenStack undercloud using python-instack. Security...
USN-7064-2: nano vulnerability
USN-7064-1 fixed a vulnerability in nano. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed while editing, the permissions grante...
PT-2024-7227 · Foxmarks · Foxmarks
Name of the Vulnerable Software and Affected Versions: foxmarks versions prior to 2.1.0 Description: The issue is related to the creation of a temporary file in the /tmp directory with insecure permissions, allowing a malicious user to read confidential information from Firefox's database,...
The vulnerability of the Notes component in operating systems iPadOS and iOS, which allows a hacker to disclose sensitive information
The vulnerability of the Notes component in iPadOS and iOS operating systems is related to insecure temporary files. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these systems...
PT-2024-8747 · Siemens · Sinema Remote Connect Server
Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: A vulnerability has been identified in the SINEMA Remote Connect Server, where the affected application does not properly assign rights to temporary files created during its...
Nano Security Breach
Nano is a text editor from Nano Open Source. A security vulnerability exists in Nano that stems from allowing possible privilege escalation via insecure temporary files...
SUSE CVE-2024-5742
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...
Arc 安全漏洞
ARC is a software package for creating and maintaining file archives. A security vulnerability exists in versions prior to Arc v1.6.0 that stems from the use of temporary files with insecure permissions, where a local user on the system may be able to trigger arbitrary code execution with root...
guava: insecure temporary directory creation
A flaw was found in Guava. The methodology for temporary directories and files can allow other local users or apps with accordant permissions to access the temp files, possibly leading to information exposure or tampering in the files created in the directory...
The vulnerability of the macOS Ventura operating system’s Shortcuts component, which allows a hacker to gain access to confidential information
The vulnerability of the macOS Ventura operating system’s Shortcuts component is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to access confidential information...
Mageia: Security Advisory (MGASA-2023-0297)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-7319 · Unknown +2 · Insights-Client +2
Name of the Vulnerable Software and Affected Versions: insights-client affected versions not specified Description: A security issue occurs due to insecure file operations or unsafe handling of temporary files and directories, leading to local privilege escalation. An unprivileged local user or...
Insecure Temporary File
transformers is vulnerable to Insecure Temporary Files. The vulnerability exists inside downloadurl due to the use of deprecated function tempfile.mktemp which creates temporary file names that are fundamentally insecure, as they do not ensure exclusive access to a file with the temporary name th...
postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...
Temporary plugin file created with insecure permissions
Jenkins creates a temporary file when a plugin is uploaded from an administrator's computer. Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates this temporary file in the system temporary directory with the default permissions for newly created files. If these permissions are overly...