PT-2016-6732

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27 IBM WebSphere Portal versions 6.1.5 through 6.1.5.3 CF27 IBM WebSphere Portal versions 7.0.0 through 7.0.0.2 CF30 IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF21 IBM WebSphere...

phpMyAdmin 4.0.10.x < 4.0.10.17 / 4.4.15.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities

Binary data 9538.prm...

DEBIAN-CVE-2016-3992

cronic before 3 allows local users to write to arbitrary files via a symlink attack on a 1 cronic.out.$$, 2 cronic.err.$$, or 3 cronic.trace.$$ file in /tmp...

OracleVM 3.2 : sos (OVMSA-2016-0078)

The remote OracleVM system is missing necessary patches to address critical security updates : - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile - Strip passwords from grub.conf and...

Ubuntu 14.04 LTS / 16.04 LTS : nginx vulnerability (USN-2991-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2991-1 advisory. It was discovered that nginx incorrectly handled saving client request bodies to temporary files. A remote attacker could possibly use this issue to...

USN-2991-1 nginx vulnerability

It was discovered that nginx incorrectly handled saving client request bodies to temporary files. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service...

USN-2991-1: nginx vulnerability

It was discovered that nginx incorrectly handled saving client request bodies to temporary files. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service...

OnionShare Competitive Conditions Loophole

OnionShare is an open source file encryption transfer or sharing software developed by Brazilian software developer Micah Lee. A competitive condition vulnerability exists in OnionShare that stems from the program failing to properly create temporary files. An attacker could use this vulnerabilit...

PHP Denial of Service Vulnerability (CNVD-2016-03580)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Pulp Information Disclosure Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. An information disclosure vulnerability exists in Pulp that stems from the program's use of an insecure method of creating temporary files. An attack...

PT-2017-7652

Name of the Vulnerable Software and Affected Versions Network Manager versions prior to 1.0.12 Description A race condition issue exists, allowing local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes. Recommendations For versions prior...

Pulp Insecure Creation of CA Keys Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A security vulnerability exists in Pulp versions prior to 2.3.0, which stems from the creation of CA certificates and keys in the /tmp/$RANDOM...

PT-2016-3447 · Sqlite +5 · Sqlite +5

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.13.0 Description: The issue is related to insufficient input validation in the os unix.c component of the SQLite database management system. This could allow an attacker to access sensitive information, compromise...

Fedora 22 : perl-IPTables-Parse-1.5-2.fc22 (2015-30f080e459)

Update to IPTables-Parse-1.5 - Fix use of predictable temporary file names Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

PT-2017-8926 · Inverse +1 · Sogo +1

Name of the Vulnerable Software and Affected Versions: SOGo version 2.3.7 Description: A memory leak issue allows remote attackers to cause a denial of service by consuming memory via a large number of attempts to upload a large attachment, related to temporary files. Recommendations: For SOGo...

sos: Usage of predictable temporary files allows privilege escalation

An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...

sos: Usage of predictable temporary files allows privilege escalation

An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...

Remotely through a browser using Microsoft Office DLL MS15-1 3 2）hijacking vulnerability-vulnerability warning-the black bar safety net

A few weeks ago, security researcher Parvez Anwar, working in their individual tweets posted on a lot of Microsoft Office DLL hijacking vulnerability1. Fig. A few weeks later, Microsoft released MS15-1 3 2 patch, fixed a related vulnerability, while addressing the is Google security research2in a...

CVE-2015-6566

zarafa-autorespond in Zarafa Collaboration Platform ZCP before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-...

Debian Insecure Temporary File Handling Vulnerability

Debian is a free operating system. Debian uses an insecure way of handling temporary files, allowing a local attacker to exploit the vulnerability to overwrite arbitrary user files...