Lucene search
+L

32 matches found

CVE
CVE
•added 2022/09/09 12:18 a.m.•76 views

CVE-2022-40299

Singular before 4.3.1 contains a predictable /tmp pathname in sdb.cc (and similar interface files), allowing a local user to gain privileges of other users via a /tmp file. The issue affects the Singular interface components with predictable /tmp paths; the record clarifies it is not about the la...

7.8CVSS7.6AI score0.00326EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/09/09 12:18 a.m.•53 views

CVE-2022-40299

In Singular before 4.3.1, a predictable /tmp pathname is used e.g., by sdb.cc, which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathname...

7.8AI score0.00326EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2022/09/09 12:18 a.m.•78 views

CVE-2022-40299

In Singular before 4.3.1, a predictable /tmp pathname is used e.g., by sdb.cc, which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathname...

7.8CVSS7.6AI score0.00326EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•11 views

Singular 安全特征问题漏洞

Singular is a computer algebra system for polynomial computation open-sourced by Singular in Germany. A security vulnerability exists in versions of Singular prior to 4.3.1 that stems from its use of a predictable /tmp pathname e.g., sdb.cc, which allows a local user to gain privileges from other...

7.8CVSS7.3AI score0.00326EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/09/09 12:00 a.m.•22 views

CVE-2022-40299

In Singular before 4.3.1, a predictable /tmp pathname is used e.g., by sdb.cc, which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathname...

7.8CVSS7.1AI score0.00326EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•10 views

PT-2022-25335 · Singular +1 · Singular +1

Name of the Vulnerable Software and Affected Versions: Singular versions prior to 4.3.1 Description: The issue is related to the use of predictable /tmp pathnames in files such as sdb.cc within the Singular interface. This predictability allows local users to gain the privileges of other users vi...

7.8CVSS7.5AI score0.00326EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•3 views

CVE-2022-40299: Use of Insufficiently Random Values

In Singular before 4.3.1, a predictable /tmp pathname is used e.g., by sdb.cc, which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathname...

7.8CVSS7.3AI score0.00326EPSS
SaveExploits1References2
Fedora
Fedora
•added 2021/12/18 1:11 a.m.•33 views

[SECURITY] Fedora 34 Update: lapack-3.9.0-7.fc34

LAPACK Linear Algebra PACKage is a standard library for numerical linear algebra. LAPACK provides routines for solving systems of simultaneous linear equations, least-squares solutions of linear systems of equations, eigenvalue problems, and singular value problems. Associated matrix factorizatio...

1.9AI score0.0257EPSS
SaveExploits0
OSV
OSV
•added 2021/06/21 8:15 p.m.•14 views

CVE-2021-24338

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting XSS security vulnerability within the 'Singular Label' field parameter...

5.4CVSS5.6AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/06/21 8:15 p.m.•7 views

CVE-2021-24338

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting XSS security vulnerability within the 'Singular Label' field parameter...

5.4CVSS6AI score0.00792EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/21 12:00 a.m.•4 views

CVE-2021-24338: Improper Neutralization of Input During Web Page Generation

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting XSS security vulnerability within the 'Singular Label' field parameter...

5.4CVSS5.8AI score0.00792EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•12 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Pods WordPress Plugin versions prior to 2.7.27, whi...

5.4CVSS5.5AI score0.00792EPSS
SaveExploits1References2
Rows per page
Query Builder