Lucene search
K

6 matches found

Cvelist
Cvelist
added 13 hours ago8 views

CVE-2026-41001 Predictable Temp Directory in Artemis Auto-configuration

Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local attacker on the same host can pre-create this predictable directory or place a symlink before the application starts...

5.3CVSS
Exploits0References1
EUVD
EUVD
added 13 hours ago7 views

EUVD-2026-36211

Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local attacker on the same host can pre-create this predictable directory or place a symlink before the application starts...

5.3CVSS5.5AI score
Exploits0References1
Snyk
Snyk
added 2025/09/17 8:42 p.m.1 views

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

5.1CVSS6.6AI score0.00031EPSS
Exploits0References2
OSV
OSV
added 2025/09/17 7:55 p.m.3 views

GHSA-8425-8R2F-MRV6 Dragonfly's directories created via os.MkdirAll are not checked for permissions

Impact DragonFly2 uses the os.MkdirAll function to create certain directory paths with specific access permissions. This function does not perform any permission checks when a given directory path already exists. This allows a local attacker to create a directory to be used later by DragonFly2 wi...

5.1CVSS6.8AI score0.00031EPSS
Exploits0References5
OSV
OSV
added 2024/05/05 3:15 a.m.3 views

DEBIAN-CVE-2024-34490

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d...

5.1CVSS5.7AI score0.0002EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/03/23 12:0 a.m.2 views

PT-2021-17743 · Netflix · Netflix Oss Hollow

Name of the Vulnerable Software and Affected Versions: Netflix OSS Hollow affected versions not specified Description: The issue allows an attacker to pre-create directories with wide permissions since the Files.existsparent check is performed before creating the directories. Furthermore, the use...

4.4CVSS4.2AI score0.00035EPSS
Exploits0References6
Rows per page
Query Builder