Apache Hadoop 安全漏洞

Apache Hadoop is a set of open source distributed systems infrastructure from the American Apache Apache Foundation. It is capable of distributed processing of large amounts of data and is characterized by high reliability, high scalability, and high fault tolerance. Apache Hadoop has a security...

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in python that stems from Python's lack of support for Unix permissions on Windows...

CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

Automox Alive Automox Agent 安全漏洞

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. Automox Alive Automox Agent 33 A security vulnerability exists on Windows that originates from incorrectly setting the permissions of a temporary directory...

CVE-2021-29429 Information disclosure through temporary directory permissions

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

Audacity Security Breach

Audacity is an open source and free cross-platform audio processing software for recording and editing audio files. A security vulnerability exists in Audacity version 2.3.3 and earlier versions, which stems from saving temporary files as var tmp, defaulting to Audacity -$USER.After Audacity...

DEBIAN-CVE-2017-15288

The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/$USER:shared/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges...

Mozilla Firefox < 54.0

The version of Firefox installed on the remote Windows host is prior to 54.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-15 advisory. - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and...

CVE-2008-7251

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors...

CVE-1999-1173

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...