3 matches found
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
6.8AI score0.00183EPSS
SaveExploits0References2
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
7.7CVSS7.5AI score
SaveExploits0References4
CVE-2005-2319
PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the Yawpconfpath parameter...
5CVSS7AI score0.01351EPSS
SaveExploits0References5
20