3960 matches found
Apache Ambari 2.2.2 - 2.4.2, 2.5.0 Information Disclosure Vulnerability
Apache Ambari might expose sensitive data to system users. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:ambari";...
CVE-2017-5655
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host...
CVE-2017-5655
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host...
Debian DLA-935-1 : lxterminal security update
It was discovered that there was a local denial of service vulnerability in lxterminal, the terminal emulator for the LXDE desktop environment. This was caused by an insecure use of temporary files for a socket file. For Debian 7 'Wheezy', this issue has been fixed in lxterminal version...
Predictable Filenames
netty-codec-http is vulnerable to predictable filenames for the temporary files. The vulnerability exists because it takes user provided file name as part of the temporary file name, allowing a malicious user to overwrite arbitrary files via a symlink attack...
Information Disclosure
sync-exec is vulnerable to information disclosure attacks. It uses a world readable tmp directory as a buffer before returning values. Since this directory is world-readable, any other user on the server is able to read the temporary files while they exist, potentially obtaining confidential...
PYSEC-2017-29
modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...
UBUNTU-CVE-2015-1838
modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...
UBUNTU-CVE-2015-1839
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...
PYSEC-2017-30
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...
The vulnerability of the gettext library, which allows a hacker to re-write certain files
The vulnerability of the Autopoint and gettextize scripts in the gettext library related to errors in the code. Exploiting this vulnerability allows an attacker to re-write certain files by manipulating symbolic references to temporary files...
CVE-2016-6188
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...
CVE-2016-6188
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...
Memory corruption
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...
DEBIAN-CVE-2016-6188
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...
CVE-2016-6188
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...
CVE-2016-6188
Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...
Code injection
IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...