3956 matches found
UBUNTU-CVE-2012-1105
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...
EulerOS 2.0 SP2 : python-pillow (EulerOS-SA-2019-2437)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size...
CVE-2011-3351
openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system...
CVE-2014-5255
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
DEBIAN-CVE-2014-5255
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
DEBIAN-CVE-2014-5254
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...
CVE-2014-5254
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...
CVE-2014-5254
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...
Code injection
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
CVE-2014-5255
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
CVE-2014-5255
CVE-2014-5255 affects xcfa prior to 5.0.1. The vulnerability stems from insecure creation of temporary files, enabling a local attacker to perform a symlink attack and overwrite arbitrary files. The provided documents do not specify a patch version or remediation steps, and do not indicate whethe...
CVE-2014-5254
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...
CVE-2014-5254
CVE-2014-5254 affects xcfa before 5.0.1, where insecure temporary file creation could allow local users to perform a symlink attack and overwrite arbitrary files. Root cause is insecure handling of temporary files. Impact is local: potential file overwrite. Remediation: upgrade to xcfa 5.0.1 or l...
CVE-2014-5254
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...
CVE-2014-1936
rc before 1.7.1-5 insecurely creates temporary files...
DEBIAN-CVE-2014-1936
rc before 1.7.1-5 insecurely creates temporary files...
CVE-2014-1936
rc before 1.7.1-5 insecurely creates temporary files...
DEBIAN-CVE-2014-1938
python-rply before 0.7.4 insecurely creates temporary files...