Lucene search
+L

3506 matches found

CNNVD
CNNVD
added 2023/01/26 12:0 a.m.8 views

Quarkus 安全漏洞

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus that stems from insecure permissions on its temp file...

3.3CVSS4.9AI score0.00206EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/01/20 12:0 a.m.27 views

SUSE SLES15 / openSUSE 15 Security Update : postgresql-jdbc (SUSE-SU-2023:0103-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0103-1 advisory. - CVE-2022-41946: Fixed a local information disclosure issue due to improper handling of temporary files bsc1206921. Tenable h...

5.5CVSS6.6AI score0.0048EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/18 7:15 p.m.0 views

CVE-2023-21612

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitati...

7.8CVSS7.1AI score0.00397EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/18 7:15 p.m.1 views

CVE-2023-21611

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitati...

7.8CVSS7.1AI score0.00397EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/18 12:0 a.m.30 views

CVE-2023-21612 Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitati...

7.8CVSS7.7AI score0.00397EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/01/18 12:0 a.m.7 views

CVE-2023-21612 Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitati...

7.8CVSS6.9AI score0.00397EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/01/18 12:0 a.m.10 views

Adobe Acrobat Reader安全漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat Reader 22.003.20282 and earlier versions, 22.003.20281 and earlier versions, and 20.005.30418 and earlier versions,...

7.8CVSS7.2AI score0.00397EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/01/18 12:0 a.m.30 views

CVE-2023-21611 Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitati...

7.8CVSS7.7AI score0.00397EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/01/12 6:30 a.m.52 views

Java Merge-sort Insecure Temporary File vulnerability

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS4.2AI score0.0024EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/01/12 6:30 a.m.19 views

GHSA-QXXC-7MQ4-MF79 Java Merge-sort Insecure Temporary File vulnerability

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.3AI score0.0024EPSS
SaveExploits0References5
NVD
NVD
added 2023/01/12 5:15 a.m.30 views

CVE-2022-24913

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.4AI score0.0024EPSS
SaveExploits0References3
Prion
Prion
added 2023/01/12 5:15 a.m.19 views

Session fixation

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

1.7CVSS5.4AI score0.0024EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/12 5:0 a.m.8 views

CVE-2022-24913

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS7.1AI score0.0024EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/01/12 5:0 a.m.33 views

CVE-2022-24913

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.7AI score0.0024EPSS
SaveExploits0References3
OSV
OSV
added 2023/01/12 5:0 a.m.21 views

CVE-2022-24913

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.5AI score
SaveExploits0References5
CVE
CVE
added 2023/01/12 5:0 a.m.64 views

CVE-2022-24913

CVE-2022-24913 affects com.fasterxml.util:java-merge-sort (versions before 1.1.0). The root cause is an insecure temporary file handling in StdTempFileProvider.java using File.createTempFile(), which can expose temporary file contents (confidentiality impact HIGH). Remediation: upgrade to 1.1.0 o...

5.5CVSS5.4AI score0.0024EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/01/12 12:0 a.m.8 views

java-merge-sort 安全漏洞

java-merge-sort is a basic standalone disk-based N-way merge-sort component for Java. A security vulnerability exists in java-merge-sort versions prior to 1.1.0, which stems from an insecure temporary file vulnerability in the StdTempFileProvider function in StdTempFileProvider.java, which allows...

5.5CVSS5.6AI score0.0024EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/01/12 12:0 a.m.10 views

PT-2023-12769 · Com.Fasterxml · Java-Merge-Sort

Name of the Vulnerable Software and Affected Versions: com.fasterxml.util:java-merge-sort versions prior to 1.1.0 Description: The issue is related to an Insecure Temporary File in the StdTempFileProvider function, located in StdTempFileProvider.java. This function utilizes the permissive...

5.5CVSS7.1AI score0.0024EPSS
SaveExploits0References9
Snyk
Snyk
added 2023/01/11 6:31 a.m.6 views

Insecure Temporary File

Overview com.fasterxml.util:java-merge-sort is a package for basic configurable disk-backed N-way merge sort Affected versions of this package are vulnerable to Insecure Temporary File. in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile...

5.5CVSS6.9AI score0.0024EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.2 views

PT-2023-1109 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.003.20282 and earlier Adobe Acrobat Reader versions 22.003.20281 and earlier Adobe Acrobat Reader versions 20.005.30418 and earlier Description: The issue is related to the creation of temporary files in...

7.8CVSS7.6AI score0.00397EPSS
SaveExploits0References6
Rows per page
Query Builder