Lucene search
+L

3811 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•4 views

CVE-2025-14307: Insecure Temporary File

An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files...

9.3CVSS6.3AI score0.00332EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/08 10:15 p.m.•16 views

CVE-2025-33111

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks...

4.3CVSS5.8AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/08 10:15 p.m.•17 views

CVE-2025-33111

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks...

4.3CVSS0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/08 9:28 p.m.•35 views

CVE-2025-33111 IBM Controller Information Disclosure

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks...

4.3CVSS0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•21 views

PT-2025-49598

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks...

4.3CVSS6.3AI score0.00214EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/02 4:28 p.m.•16 views

Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway

Summary Security Vulnerabilities in node.js packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-12816 DESCRIPTION: An interpretation-conflict CWE-436 vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attacke...

8.7CVSS4.9AI score0.00742EPSS
SaveExploits2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/01 12:00 a.m.•25 views

The vulnerability of the /tmp/new_qos.rule file in D-link DIR-823G router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /tmp/newqos.rule file in D-link DIR-823G router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

5.5CVSS7.4AI score0.01474EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2025/11/28 3:38 p.m.•2 views

SUSE-SU-2025:4308-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via gettmpfile bsc1249055...

3.7CVSS5.9AI score0.00397EPSS
SaveExploits0References3
OSV
OSV
•added 2025/11/28 12:00 a.m.•15 views

CVE-2025-66384

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmpname...

8.2CVSS6.8AI score
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/11/26 10:32 a.m.•24 views

Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java and Node.js

Summary There are multiple vulnerabilities in Java and Node.js used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow a remote attacker to cause high confidentiali...

7.5CVSS6.7AI score0.00694EPSS
SaveExploits2Affected Software1
OpenVAS
OpenVAS
•added 2025/11/21 12:00 a.m.•2 views

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2025-2433)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.7CVSS5.8AI score0.00397EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•5 views

TencentOS Server 4: glib2 (TSSA-2025:0742)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0742 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

3.7CVSS5.9AI score0.00397EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•18 views

DELL Alienware Command Center Elevation of Privilege Vulnerability

DELL Alienware Command Center is Dell's proprietary control software for Alienware-branded computers, which is used to customize hardware features, optimize performance and manage game settings. An elevation of privilege vulnerability exists in DELL Alienware Command Center, which stems from an...

7.8CVSS7.3AI score0.00124EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•15 views

DELL Alienware Command Center Temporary File Insecurity Vulnerability

DELL Alienware Command Center is Dell's proprietary control software for Alienware-branded computers, which is used to customize hardware features, optimize performance and manage game settings. DELL Alienware Command Center has a temporary file insecurity vulnerability that can be exploited by...

6.6CVSS7AI score0.00113EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/14 7:59 p.m.•15 views

CVE-2025-46368

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

6.6CVSS6.4AI score0.00113EPSS
SaveExploits0References1
Veracode
Veracode
•added 2025/11/14 4:38 a.m.•14 views

Insecure Temporary File Usage

llama-index-core is vulnerable to Insecure Temporary File Usage. The vulnerability is due to the use of a predictable hardcoded cache directory /tmp/llamaindex in getcachedir, where attackers on multi-user Linux systems can steal cached model data, poison embeddings, or exploit symlink race...

7.3CVSS7.3AI score0.00147EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2025/11/13 9:31 p.m.•17 views

EUVD-2025-175360

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

7.8CVSS6AI score0.00124EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/13 7:41 p.m.•21 views

CVE-2025-46369

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

7.8CVSS0.00124EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/13 7:41 p.m.•25 views

CVE-2025-46369

Dell Alienware Command Center (AWCC) 6.x, prior to 6.10.15.0, contains an Insecure Temporary File flaw that can be exploited locally by a low-privilege user to achieve privilege escalation. The vulnerability stems from handling of temporary files, enabling elevation of privileges on the host. Aff...

7.8CVSS5.8AI score0.00124EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/13 7:41 p.m.•9 views

CVE-2025-46369

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...

7.8CVSS5.8AI score0.00124EPSS
SaveExploits0References1
Rows per page
Query Builder