7 matches found
EUVD-2024-42715
Malicious code in bioql PyPI...
CVE-2024-47884 Insecure Temporary File in `foxmarks`
foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp directory with read permissions for all users containing a copy of Firefox's database of bookmarks, history, input history, visits counter, use counter, view counter and more...
CVE-2024-47884
foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp directory with read permissions for all users containing a copy of Firefox's database of bookmarks, history, input history, visits counter, use counter, view counter and more...
CVE-2024-47884
CVE-2024-47884 affects foxmarks, a CLI read-only interface for Firefox bookmarks/history. The root cause is insecure temporary file handling: NamedTempFile is created with 0600, but after copying the Firefox database the file’s permissions are copied as 0644, exposing the data to any local user. ...
CVE-2024-47884 Insecure Temporary File in `foxmarks`
foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp directory with read permissions for all users containing a copy of Firefox's database of bookmarks, history, input history, visits counter, use counter, view counter and more...
CVE-2024-47884: Creation of Temporary File With Insecure Permissions
foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp directory with read permissions for all users containing a copy of Firefox's database of bookmarks, history, input history, visits counter, use counter, view counter and more...
Foxmarks security vulnerabilities
foxmarks is an extremely fast, highly extensible and easy to integrate command line read-only interface by zefr0x individual developers. A security vulnerability exists in foxmarks versions prior to v2.1.0, which stems from the presence of insecure privileges that allow a malicious user to read t...