Lucene search
+L

3448 matches found

OSV
OSV
added 2025/01/09 1:15 a.m.6 views

UBUNTU-CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.5CVSS6AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/01/09 12:33 a.m.53 views

CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.5CVSS0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 12:33 a.m.19 views

CVE-2023-38037

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current umask settings, meaning that it's possible for other users on the same system to read the contents of the temporary file. Attackers that ha...

5.5CVSS7AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.5 views

PT-2025-49806

Name of the Vulnerable Software and Affected Versions Robocode version 1.9.3.6 Description An insecure temporary file creation issue exists in the AutoExtract component. The createTempFile method does not securely create temporary files, potentially allowing attackers to exploit race conditions...

9.3CVSS7.4AI score0.00294EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.6 views

PT-2025-34184

Name of the Vulnerable Software and Affected Versions: glib2.0 affected versions not specified Description: The software contains a buffer underrun issue within the get tmp file function. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

9.8CVSS6.6AI score0.00784EPSS
SaveExploits1References45
CNVD
CNVD
added 2024/12/30 12:0 a.m.6 views

DELL NativeEdge Information Disclosure Vulnerability

DELL NativeEdge is an edge operations software platform from Dell Technologies designed to simplify the deployment, management and secure scaling of edge computing environments. DELL NativeEdge suffers from an information disclosure vulnerability that stems from improperly set permissions on...

6.5CVSS6.1AI score0.00172EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/27 12:32 p.m.6 views

OESA-2024-2580 socat security update

Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device serial line etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc., th...

9.8CVSS7AI score0.008EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/25 4:15 p.m.28 views

CVE-2024-52543

Dell NativeEdge, versions 2.1.0.0, contains a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

6.5CVSS0.00172EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/25 3:13 p.m.25 views

CVE-2024-52543

Dell NativeEdge, versions 2.1.0.0, contains a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

6.5CVSS0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/25 12:0 a.m.7 views

Dell NativeEdge 安全漏洞

DELL NativeEdge is an edge operations software platform from Dell Technologies designed to simplify the deployment, management and secure scaling of edge computing environments. DELL NativeEdge suffers from an information disclosure vulnerability that stems from improperly set permissions on...

6.5CVSS6AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/25 12:0 a.m.11 views

PT-2024-35368 · Dell · Dell Nativeedge

Name of the Vulnerable Software and Affected Versions: Dell NativeEdge version 2.1.0.0 Description: The issue is related to the creation of temporary files with insecure permissions. A high-privileged attacker with local access could potentially exploit this, leading to information disclosure...

6.5CVSS6.7AI score0.00172EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/12/16 12:0 a.m.13 views

Debian dla-3995 : libpostgresql-jdbc-java - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3995 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3995-1 [email protected]...

10CVSS7.4AI score0.0481EPSS
SaveExploits2References8
SUSE CVE
SUSE CVE
added 2024/12/09 3:48 a.m.6 views

SUSE CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

6.6CVSS7AI score0.00217EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/09 2:15 a.m.23 views

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

6.6CVSS0.00217EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/09 2:15 a.m.9 views

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

6.6CVSS7.1AI score
SaveExploits0References3
OSV
OSV
added 2024/12/09 2:15 a.m.2 views

DEBIAN-CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

6.6CVSS5.3AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 2:15 a.m.3 views

UBUNTU-CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

6.6CVSS5.8AI score0.00217EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/12/09 12:0 a.m.16 views

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

6.6CVSS0.00217EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/09 12:0 a.m.16 views

CVE-2024-55566

ColPack 1.0.10 through 9a7293a has a predictable temporary file located under /tmp with a name derived from an unseeded RNG. The impact can be overwriting files or making ColPack graphing unavailable to other users...

6.6CVSS6.9AI score0.00217EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/09 12:0 a.m.71 views

CVE-2024-55566

CVE-2024-55566 affects ColPack 1.0.10 through 9a7293a. A predictable temporary file in /tmp (name derived from an unseeded RNG) can lead to overwriting files or making ColPack graphing unavailable to other users. The provided documents do not specify the exact patched version; Fedora advisories n...

6.6CVSS7AI score0.00217EPSS
SaveExploits0References3
Rows per page
Query Builder