4318 matches found
The vulnerability of the McAfee Agent antivirus software, related to errors in processing temporary files, allows a hacker to increase their privileges.
The vulnerability of the McAfee Agent antivirus software is related to errors in the processing of temporary files. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
GHSA-Q4HM-FWC9-HMV6 Insecure temporary file used in com.squareup:connect
This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file...
Adobe Photoshop Elements Elevation of Privilege Vulnerability
Adobe Photoshop Elements is Adobe's new image editing, photo retouching and Web graphics solution following Photoshop. An elevation of privilege vulnerability exists in Adobe Photoshop Elements 5.2 and earlier versions. The vulnerability stems from the creation of temporary files in a directory...
Creative Cloud Desktop Application 安全漏洞
Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file system write vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. The vulnerability originates from the creation of...
Adobe Premiere Elements Elevation of Privilege Vulnerability
Adobe Premiere Elements is a video editing software. An elevation of privilege vulnerability exists in Adobe Premiere Elements 5.2 and earlier versions. The vulnerability originates from the creation of temporary files in a directory with incorrect permissions. An attacker can exploit the...
SUSE: Security Advisory (SUSE-SU-2015:0834-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-6633 · Adobe · Photoshop Elements
Name of the Vulnerable Software and Affected Versions: Adobe Photoshop Elements versions 5.2 and earlier Description: The issue is related to the creation of temporary files with insecure permissions in Adobe Photoshop Elements. An unauthenticated attacker could exploit this to call functions...
Adobe Photoshop 安全漏洞
Adobe Photoshop Elements is Adobe's new image editing, photo retouching and Web graphics solution following Photoshop. An elevation of privilege vulnerability exists in Adobe Photoshop Elements 5.2 and earlier versions. The vulnerability stems from the creation of temporary files in a directory...
PT-2021-6643 · Adobe · Adobe Creative Cloud Desktop Application
Name of the Vulnerable Software and Affected Versions: Adobe Creative Cloud Desktop Application version 2.4 and earlier Description: The issue is related to an insecure temporary file creation, which could allow an attacker to overwrite arbitrary files in the context of the current user...
CVE-2021-31154
pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...
CVE-2020-15076
Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp...
netty: Information disclosure via the local system temporary directory
In Netty there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used, a local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the...
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s encryption protection removal process allows a perpetrator to execute arbitrary code with SYSTEM privileges.
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s encryption protection removal process for Windows involves the creation of temporary files with insecure permissions. Exploiting this vulnerability allows a hacker to execute arbitrary code with SYSTEM privileges...
The vulnerability in the process of installing the Cisco AnyConnect Secure Mobility Client encryption software for Windows allows a perpetrator to execute arbitrary code with SYSTEM privileges.
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s encryption protection setup for Windows relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a hacker to execute arbitrary code with SYSTEM privileges...
The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions, which allows a hacker to elevate their privileges and perform arbitrary writes to the file system.
The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and perform arbitrary writes to the file system...
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s encryption protection removal process allows a perpetrator to execute arbitrary code with SYSTEM privileges.
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s encryption protection removal process for Windows involves the creation of temporary files with insecure permissions. Exploiting this vulnerability allows a hacker to execute arbitrary code with SYSTEM privileges...
The vulnerability in the update process of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows allows a perpetrator to execute arbitrary code with SYSTEM privileges.
The vulnerability of the Cisco AnyConnect Secure Mobility Client cryptographic security update process for Windows relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a attacker to execute arbitrary code with SYSTEM privileges...
CVE-2021-23892
By exploiting a time of check to time of use TOCTOU race condition during the Endpoint Security for Linux Threat Prevention and Firewall ENSL TP/FW installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrar...
JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2022-20145)
JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Czech Republic. The tool provides continuous unit testing, code quality analysis and build issue analysis reports.JetBrains TeamCity is vulnerable to an information disclosure vulnerability, which ...
PT-2021-15594 · Mcafee · Endpoint Security For Linux Threat Prevention/Firewall
Name of the Vulnerable Software and Affected Versions: Endpoint Security for Linux Threat Prevention and Firewall ENSL TP/FW affected versions not specified Description: A local user can exploit a time of check to time of use TOCTOU race condition during the installation process to perform a...