DEBIAN-CVE-2020-29582

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions...

CVE-2020-29582

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions...

UBUNTU-CVE-2020-29582

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions...

CVE-2020-29582

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions...

Security Bulletin: Apache Ant as used by IBM QRadar SIEM is vulnerable to Insecure Temporary Files (CVE-2020-11979)

Summary Apache Ant as used by IBM QRadar SIEM is vulnerable to Insecure Temporary Files Vulnerability Details CVEID: CVE-2020-11979 DESCRIPTION: Apache Ant could allow a remote authenticated attacker to bypass security restrictions, caused by an insecure temporary file flaw. By sending a...

PT-2021-14938

Name of the Vulnerable Software and Affected Versions: eCNS280 TD versions V100R005C00 and V100R005C10 Description: The issue is related to an information leak. A command lacks a timeout exit mechanism, and temporary files contain sensitive information. This allows attackers to obtain information...

openSUSE Security Update : PackageKit (openSUSE-2020-2292)

This update for PackageKit fixes the following issue : - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. bsc1169739 This update was imported...

CVE-2021-26067

Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp directory, via a Sensitive Data Exposure vulnerability in the /chart endpoint. The affected versions...

Unauthenticated information leakage of temporary files and project keys - CVE-2021-26069

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/\id/ActionsAndOperations API endpoint. The affected versions are before...

CVE-2020-7343

Missing Authorization vulnerability in McAfee Agent MA for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files...

CVE-2020-7343

Missing Authorization vulnerability in McAfee Agent MA for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files...

CVE-2020-7343 Improper Authorization vulnerability in MA

Missing Authorization vulnerability in McAfee Agent MA for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files...

PT-2021-12647 · Mcafee · Mcafee Agent

Name of the Vulnerable Software and Affected Versions: McAfee Agent MA for Windows versions prior to 5.7.1 Description: The issue allows local users to block product updates by manipulating a directory used for temporary files, resulting in the product continuing to function with out-of-date...

Mcafee McAfee Agent 授权问题漏洞

The McAfee McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator the antivirus management platform and managed products. A security vulnerability exists in McAfee Agent for Windows prior to 5.7.1, which stems from a lack o...

Apache Netbeans-html4j Competition Condition Issue Vulnerability

Apache Netbeans-html4j is a Java-based and cross-platform Apache Foundation software for Java-Javascript interaction. A security vulnerability exists in the Apache Netbeans-html4j API version 1.7.1 HTML/Java, which results from a race condition between deleting temporary files and creating...

Updated audacity package fixes security vulnerability

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there CVE-2020-11867...

MGASA-2021-0001 Updated audacity package fixes security vulnerability

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there CVE-2020-11867...

Security update for PackageKit (moderate)

openSUSE Security Update: Security update for PackageKit Announcement ID: openSUSE-SU-2020:2292-1 Rating: moderate References: 1169739 1176930 Cross-References: CVE-2020-16121 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

OPENSUSE-SU-2020:2292-1 Security update for PackageKit

This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. bsc1169739 This update was imported...

SUSE SLED15 / SLES15 Security Update : PackageKit (SUSE-SU-2020:3845-1)

This update for PackageKit fixes the following issue : CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. bsc1169739 Note that Tenable Network...